mindsdb
Yara Scan Results
Generated on 2024-07-12 10:22:13
Passed Tests
Failed Tests
Issues
FILE tests/integration_tests/flows/test_mysql_bin_api.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0B4A4E8BD11C48FFB4730D4D2C32191A' | 32 | 2249 | 0 | b'0B4A4E8BD11C48FFB4730D4D2C32191A' |
FILE tests/handler_tests/test_sap_erp_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4088 | 0 | b'identifier' |
FILE tests/handler_tests/test_eventbrite_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0bb5e81d009275e956f98c418a9a3025' | 32 | 15680 | 0 | b'0bb5e81d009275e956f98c418a9a3025' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'282ef80475d468edff954cb243435432' | 32 | 16077 | 0 | b'282ef80475d468edff954cb243435432' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 309 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 327 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9815 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9828 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9875 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9888 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9927 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9940 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9991 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10004 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10127 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10158 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10191 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 10234 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16362 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16375 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16433 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16446 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16498 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16511 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16603 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16632 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16648 | 0 | b'identifier' |
FILE tests/handler_tests/test_tripadvisor_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 429 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 447 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6997 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7010 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7049 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7062 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7108 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7121 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7179 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7192 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7245 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7258 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7308 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7321 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7379 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7464 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7481 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7505 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7532 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7551 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7575 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7593 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9146 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9159 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9204 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9217 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9265 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9278 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9322 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9335 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9422 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9445 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9463 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9482 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11302 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11315 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11363 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11376 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11421 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11434 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11486 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11499 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11600 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11617 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11638 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11662 | 0 | b'identifier' |
FILE tests/handler_tests/test_ms_teams_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 239 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 257 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17937 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19603 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19641 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 19838 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20655 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20693 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22299 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22542 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23734 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25664 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25702 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25944 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 26187 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27169 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27207 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 27449 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28430 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 28468 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29434 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29476 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29524 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31254 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 31497 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33316 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33354 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33591 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 33834 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34765 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34803 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36495 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36738 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 37012 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39057 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39095 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39340 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39583 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 39857 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40897 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40935 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41969 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42027 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42088 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42136 | 0 | b'Identifier' |
FILE tests/handler_tests/test_rocket_chat_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 345 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 363 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2938 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2951 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2995 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3008 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3100 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3117 | 0 | b'identifier' |
FILE tests/handler_tests/test_coinbase_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 319 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 337 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3257 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3270 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3317 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3330 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3425 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3448 | 0 | b'identifier' |
FILE tests/handler_tests/test_binance_handler.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 313 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 331 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4075 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4088 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4140 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4153 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4253 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4276 | 0 | b'identifier' |
FILE tests/integrations/utilities/rag/data/test.pdf
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 0 | 0 | b'%PDF' | |
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 248708 | 0 | b'tq\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 259052 | 0 | b't[\xe9' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267067 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267102 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' |
FILE tests/unit/executor/test_executor.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0B4A4E8BD11C48FFB4730D4D2C32191A' | 32 | 29612 | 0 | b'0B4A4E8BD11C48FFB4730D4D2C32191A' |
FILE tests/unit/executor/test_udf.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1694 | 0 | b'Identifier' |
FILE tests/unit/handlers/test_web.py
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 770 | 0 | b'%PDF' | |
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 1355 | 0 | b'%PDF' |
FILE
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 218 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6637 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 409 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 456 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 491 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1603 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1638 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2218 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2253 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2913 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2948 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3862 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3897 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5637 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6235 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6270 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7366 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7401 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9645 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9680 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11304 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11339 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 12193 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12228 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 13470 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13505 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14667 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14702 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15601 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15636 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16238 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16274 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17254 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17290 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 18726 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18762 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 21242 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21278 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 22901 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 22937 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 23528 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 23564 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 24068 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24104 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24912 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 24978 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25030 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25090 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25142 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25192 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25248 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 25298 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 111 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 158 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 193 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 365 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 405 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1046 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1062 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 11585 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 362 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 409 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 444 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3991 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4512 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4674 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5034 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5103 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5310 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5422 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5447 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5481 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5507 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5528 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5876 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5943 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6414 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6624 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 958 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1157 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2735 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3200 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3703 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4022 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 78 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1293 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1744 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2247 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3015 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1554 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2461 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3219 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 54 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 790 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 133 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7103 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9623 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 74 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1953 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2188 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 41 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1101 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 487 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2618 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3627 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3859 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6848 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7292 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7944 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8286 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8319 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8376 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8676 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8709 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8758 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8793 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10003 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10103 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10381 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10496 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10835 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10874 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11346 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11407 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11490 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14183 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14214 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14260 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14291 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14342 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14373 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14422 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14455 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14508 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14540 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14592 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14622 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14704 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14756 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14785 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14834 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14861 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14908 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14937 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 14982 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15013 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15064 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15092 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15140 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15174 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15228 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15259 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15307 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15338 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15419 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16209 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16248 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16296 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16366 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16443 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16504 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16587 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16614 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16691 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17293 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17647 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17682 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17732 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17819 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17842 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17885 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17916 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17964 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 17996 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18045 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18073 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18121 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18155 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18239 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 18861 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20208 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20364 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20793 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20907 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20940 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 20996 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 21772 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 34672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35435 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35656 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35809 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36271 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36518 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36777 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37458 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37526 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37562 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37597 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37684 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37695 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 37897 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 40503 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 42153 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 47314 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48249 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 50674 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52166 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 52517 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 60829 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62027 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62544 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62652 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 62924 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63065 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63097 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63131 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63163 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63196 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63228 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63261 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63292 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63324 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63359 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63395 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63421 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63567 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63642 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63715 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 63855 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 64966 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65895 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 66144 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79426 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 324 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 415 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 441 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 836 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 937 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1145 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1517 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1682 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3469 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3979 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2081 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'IDENTIFIER' | 10 | 10450 | 0 | b'IDENTIFIER' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 231 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2884 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 143 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3726 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6020 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1496 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3729 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4550 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4662 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4921 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5210 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7695 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8120 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9183 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 129 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3125 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3302 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3472 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 65 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1178 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1252 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 45 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 440 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 83 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 518 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 79 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1181 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3755 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 95 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1538 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1814 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1897 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2030 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2374 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2442 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3738 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7049 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 170 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 284 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 218 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 543 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 248 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 259 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 207 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 215 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 224 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 217 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 188 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 242 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 237 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 191 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 216 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 228 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 205 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 180 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 267 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 181 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 261 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 266 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 174 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 223 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 210 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 221 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 247 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 35 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 104 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2321 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 235 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 516 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2069 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2890 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2926 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2966 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3001 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3044 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3078 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3116 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3151 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3190 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3229 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3272 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3309 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3350 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3392 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3438 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3484 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3534 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3575 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3620 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3656 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3744 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3789 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4187 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4251 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4506 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4599 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5011 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5041 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5078 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5111 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5151 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5193 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5235 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5275 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5315 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5354 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5392 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5435 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5552 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5606 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6035 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6106 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6281 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6672 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6730 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6988 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7086 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9002 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9424 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9652 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 9724 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 144 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1583 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2981 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3002 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3632 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4360 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4796 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 170 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4799 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 36 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2603 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2693 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2739 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2871 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3009 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 48 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 664 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2309 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2345 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2391 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 290 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10644 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10769 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10853 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 654 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14575 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 87 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2364 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 121 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1426 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1906 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2267 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3138 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6926 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 176 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1329 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1573 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1626 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1684 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1778 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8109 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11170 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11199 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15057 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 15171 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 284 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4678 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4689 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4701 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4765 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4974 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5041 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5052 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5064 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5129 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5197 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5280 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5361 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5440 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5545 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5558 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5675 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1572 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1740 | 0 | b'Identifier' | ||
| Spyeye | spyeye_plugins | $b | False | Jean-Philippe Teissier / @Jipe_ () | b'config.dat' | 10 | 1016 | 0 | b'config.dat' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2662 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2707 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3372 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4419 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4671 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5641 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5864 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15537 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 15595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 16772 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17153 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17178 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17212 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 17264 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 126 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2168 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2592 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 187 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 205 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5209 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8259 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8385 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9813 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3870 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2255 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 772 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 888 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1096 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1176 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1220 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2503 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5929 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0b9c477a9c2845aa94c72d56b621203d' | 32 | 2151 | 0 | b'0b9c477a9c2845aa94c72d56b621203d' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'd25509b171ad79395dc2c51b099ee6d0' | 32 | 3702 | 0 | b'd25509b171ad79395dc2c51b099ee6d0' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1295 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2801 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4943 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1397 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4314 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8470 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 12076 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'21510b8a953c4d62958c9907f3cf9f87' | 32 | 1087 | 0 | b'21510b8a953c4d62958c9907f3cf9f87' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'70f28e55416b4dfe8588aa175ecae63a' | 32 | 1316 | 0 | b'70f28e55416b4dfe8588aa175ecae63a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'6d1480e0bf4b46e1a71be093f105d654' | 32 | 1566 | 0 | b'6d1480e0bf4b46e1a71be093f105d654' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'169fa742a8374fe9a516caecfb33432a' | 32 | 1830 | 0 | b'169fa742a8374fe9a516caecfb33432a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'b144844d418f404a8f0f1da2a63cdf7c' | 32 | 1707 | 0 | b'b144844d418f404a8f0f1da2a63cdf7c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'25544d8fe08f4b06a4cecceabc49ff6a' | 32 | 1742 | 0 | b'25544d8fe08f4b06a4cecceabc49ff6a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'b144844d418f404a8f0f1da2a63cdf7c' | 32 | 1811 | 0 | b'b144844d418f404a8f0f1da2a63cdf7c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'10eeb618d598468ba81c8d83da9613ff' | 32 | 2357 | 0 | b'10eeb618d598468ba81c8d83da9613ff' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'10eeb618d598468ba81c8d83da9613ff' | 32 | 2416 | 0 | b'10eeb618d598468ba81c8d83da9613ff' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'10eeb618d598468ba81c8d83da9613ff' | 32 | 3088 | 0 | b'10eeb618d598468ba81c8d83da9613ff' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'3666b704803140e2b60cadfcc59cf66a' | 32 | 3127 | 0 | b'3666b704803140e2b60cadfcc59cf66a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'3366b704803140e2b60cadfcc59cf66a' | 32 | 3187 | 0 | b'3366b704803140e2b60cadfcc59cf66a' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'b144844d418f404a8f0f1da2a63cdf7c' | 32 | 3634 | 0 | b'b144844d418f404a8f0f1da2a63cdf7c' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1821 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1960 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3795 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2237 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5156 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2918 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5388 | 0 | b'Identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'23d6b9e0c2fab7eba2e8b7e452cead47' | 32 | 3111 | 0 | b'23d6b9e0c2fab7eba2e8b7e452cead47' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1951 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4675 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8002 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10608 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13070 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4399 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5508 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6535 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1709 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3833 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5239 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5290 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5345 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5400 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5458 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5515 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 5569 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6341 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 6493 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 7887 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8285 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 767 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2093 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6404 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2052 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2131 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2184 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2399 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2480 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 275 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4656 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5125 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6882 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7418 | 0 | b'Identifier' | ||
| ft_pdf | Signature to trigger on PDF file magic. | ft_pdf | False | Jason Batchelor (Emerson) | 20141230 | b'%PDF' | 4 | 0 | 0 | b'%PDF' | |
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 248708 | 0 | b'tq\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 259052 | 0 | b't[\xe9' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267067 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'92e4308b97cd13e6df58b1a27661d89c' | 32 | 267102 | 0 | b'92e4308b97cd13e6df58b1a27661d89c' | ||
| ft_zip | File type signature for basic ZIP files. | ft_zip | $pk | False | Jason Batchelor (Emerson) | 20141217 | b'PK\x03\x04' | 4 | 0 | 0 | b'PK\x03\x04' |
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | 30 | 0 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | 30 | 331 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00' | 30 | 914 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | 30 | 1174 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00' | 30 | 2047 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00' | 30 | 2291 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00' | 30 | 2819 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00' | 30 | 3207 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00' | 30 | 3513 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00' | ||
| packer | Zip_Archive | $a0 | False | _pusher_ () | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | 30 | 3748 | 0 | b'PK\x03\x04\x14\x00\x08\x08\x08\x00\xb8yRW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1403 | 0 | b'Identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1508 | 0 | b'Identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't?\xe9' | 3 | 118436 | 0 | b't?\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 254523 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 255106 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 261269 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xab\xe9' | 3 | 25264 | 0 | b't\xab\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1453 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1931 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6929 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'cf93972b116ca5268827d575f2cc226b' | 32 | 384 | 0 | b'cf93972b116ca5268827d575f2cc226b' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0996e5faa3f7415bacd51a6e8e161d5e' | 32 | 6735 | 0 | b'0996e5faa3f7415bacd51a6e8e161d5e' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'c22335d83cb04ac281e2ef080792f2dd' | 32 | 6850 | 0 | b'c22335d83cb04ac281e2ef080792f2dd' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'23d6b9e0c2fab7eba2e8b7e452cead47' | 32 | 5275 | 0 | b'23d6b9e0c2fab7eba2e8b7e452cead47' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1063 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3279 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 29567 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29634 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 29751 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 30157 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3705 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3745 | 0 | b'identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd5\xe9' | 3 | 11355 | 0 | b't\xd5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 1637 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tk\xe9' | 3 | 7781 | 0 | b'tk\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1936 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2961 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4683 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7029 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 9187 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11895 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 16160 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 4966 | 0 | b't\xca\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3148 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3294 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1466 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7323 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'd25509b171ad79395dc2c51b099ee6d0' | 32 | 4040 | 0 | b'd25509b171ad79395dc2c51b099ee6d0' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 489 | 0 | b'identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tG\xe9' | 3 | 1664 | 0 | b'tG\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 66606 | 0 | b't\x1d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 126938 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'te\xe9' | 3 | 154340 | 0 | b'te\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xba\xe9' | 3 | 156869 | 0 | b't\xba\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'te\xe9' | 3 | 172610 | 0 | b'te\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tG\xe9' | 3 | 1664 | 0 | b'tG\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2088 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6622 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 10285 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6366 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6645 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3153 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2431 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 123 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 7818 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8198 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5245 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13546 | 0 | b'Identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 28914 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 31435 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 32398 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf1\xe9' | 3 | 70342 | 0 | b't\xf1\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1848 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4148 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6535 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 8186 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 11185 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 13257 | 0 | b'Identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 2822 | 0 | b't\xe8\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3802 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 225 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1034 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 976 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1647 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 4605 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4751 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 6197 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 119 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2387 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | 64 | 1333 | 0 | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | 64 | 1335 | 0 | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' | 64 | 1345 | 0 | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | 64 | 331 | 0 | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' | 64 | 1451 | 0 | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x02\xe9' | 3 | 332131 | 0 | b't\x02\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x13\xe9' | 3 | 10513 | 0 | b't\x13\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 37426 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ts\xe9' | 3 | 9145 | 0 | b'ts\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa8\xe9' | 3 | 71139 | 0 | b't\xa8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 90219 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 153290 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x80\xe9' | 3 | 159428 | 0 | b't\x80\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa2\xe9' | 3 | 214982 | 0 | b't\xa2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't|\xe9' | 3 | 495266 | 0 | b't|\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1c\xe9' | 3 | 521540 | 0 | b't\x1c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x96\xe9' | 3 | 586121 | 0 | b't\x96\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 595443 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x15\xe9' | 3 | 691171 | 0 | b't\x15\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x12\xe9' | 3 | 735188 | 0 | b't\x12\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tG\xe9' | 3 | 762615 | 0 | b'tG\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9c\xe9' | 3 | 849329 | 0 | b't\x9c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 860359 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 865409 | 0 | b't\xff\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1c\xe9' | 3 | 900809 | 0 | b't\x1c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd7\xe9' | 3 | 902337 | 0 | b't\xd7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf4\xe9' | 3 | 1073656 | 0 | b't\xf4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't>\xe9' | 3 | 1134707 | 0 | b't>\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 1159080 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 1213080 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 1231665 | 0 | b't\n\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x12\xe9' | 3 | 1276393 | 0 | b't\x12\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xad\xe9' | 3 | 1280327 | 0 | b't\xad\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa5\xe9' | 3 | 1399314 | 0 | b't\xa5\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $desc3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| anti_sandboxing | Qemu_Detection | $desc3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| anti_sandboxing | Qemu_Detection | $dev3 | False | () | b'qemu' | 4 | 71797 | 0 | b'qemu' | ||
| Old_Internal_PEiD | aspr12 | $a0 | False | PEiD () | b'h\x01| 6 |
600427 |
0 |
b'h\x01 | | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 1810 | 0 | b't\x08\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 145626 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb6\xe9' | 3 | 284222 | 0 | b't\xb6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcc\xe9' | 3 | 367938 | 0 | b't\xcc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 534508 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 586686 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 614838 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 952972 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | aspr11b | $a0 | False | PEiD () | b'`\xe9c\x04' | 4 | 920462 | 0 | b'`\xe9c\x04' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 46474 | 0 | b'tV\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 51339 | 0 | b't\x98\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb7\xe9' | 3 | 321391 | 0 | b't\xb7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x89\xe9' | 3 | 392668 | 0 | b't\x89\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tr\xe9' | 3 | 418064 | 0 | b'tr\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1a\xe9' | 3 | 425708 | 0 | b't\x1a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 513409 | 0 | b'tV\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't/\xe9' | 3 | 538250 | 0 | b't/\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 586439 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x16\xe9' | 3 | 637087 | 0 | b't\x16\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8d\xe9' | 3 | 647218 | 0 | b't\x8d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x92\xe9' | 3 | 694221 | 0 | b't\x92\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 759598 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xec\xe9' | 3 | 776475 | 0 | b't\xec\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't@\xe9' | 3 | 786688 | 0 | b't@\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tQ\xe9' | 3 | 861670 | 0 | b'tQ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tA\xe9' | 3 | 864973 | 0 | b'tA\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 956570 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x15\xe9' | 3 | 991928 | 0 | b't\x15\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0c\xe9' | 3 | 1078465 | 0 | b't\x0c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x10\xe9' | 3 | 1094936 | 0 | b't\x10\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tU\xe9' | 3 | 1238746 | 0 | b'tU\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 1370697 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 1381696 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tT\xe9' | 3 | 1464998 | 0 | b'tT\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't3\xe9' | 3 | 1584218 | 0 | b't3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 1720258 | 0 | b't4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 1767582 | 0 | b't\xe0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x19\xe9' | 3 | 1880431 | 0 | b't\x19\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x16\xe9' | 3 | 1942291 | 0 | b't\x16\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa4\xe9' | 3 | 1959454 | 0 | b't\xa4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd7\xe9' | 3 | 1964745 | 0 | b't\xd7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 1966408 | 0 | b't%\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 1981833 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 1991838 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb2\xe9' | 3 | 2133762 | 0 | b't\xb2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't!\xe9' | 3 | 2154684 | 0 | b't!\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 2192707 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 2275017 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb5\xe9' | 3 | 2334790 | 0 | b't\xb5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x11\xe9' | 3 | 2360262 | 0 | b't\x11\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcf\xe9' | 3 | 2423667 | 0 | b't\xcf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 2429588 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc8\xe9' | 3 | 2449035 | 0 | b't\xc8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 2550390 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 2552473 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 2563124 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8b\xe9' | 3 | 2617117 | 0 | b't\x8b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 2657322 | 0 | b't\xcd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't@\xe9' | 3 | 2689173 | 0 | b't@\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 2705144 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 2743888 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 2818936 | 0 | b't\xcd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaa\xe9' | 3 | 2854811 | 0 | b't\xaa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x19\xe9' | 3 | 2857077 | 0 | b't\x19\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x80\xe9' | 3 | 3024726 | 0 | b't\x80\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tF\xe9' | 3 | 3067810 | 0 | b'tF\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 3098270 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tn\xe9' | 3 | 3122792 | 0 | b'tn\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 3166909 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 3188543 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 3364804 | 0 | b'ti\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x10\xe9' | 3 | 3384269 | 0 | b't\x10\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0c\xe9' | 3 | 3426226 | 0 | b't\x0c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 3510295 | 0 | b'tp\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1f\xe9' | 3 | 3573427 | 0 | b't\x1f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't/\xe9' | 3 | 3575792 | 0 | b't/\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x00\xe9' | 3 | 3641835 | 0 | b't\x00\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf1\xe9' | 3 | 3661498 | 0 | b't\xf1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xce\xe9' | 3 | 3695370 | 0 | b't\xce\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x14\xe9' | 3 | 3749731 | 0 | b't\x14\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't?\xe9' | 3 | 3789246 | 0 | b't?\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 3823567 | 0 | b'tx\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't|\xe9' | 3 | 3993363 | 0 | b't|\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 4124169 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x97\xe9' | 3 | 35855 | 0 | b't\x97\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 62943 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb1\xe9' | 3 | 296559 | 0 | b't\xb1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfd\xe9' | 3 | 374985 | 0 | b't\xfd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 397191 | 0 | b't\xeb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 420823 | 0 | b't\xeb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbe\xe9' | 3 | 509081 | 0 | b't\xbe\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 750043 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc8\xe9' | 3 | 845924 | 0 | b't\xc8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tG\xe9' | 3 | 895048 | 0 | b'tG\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 952307 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdb\xe9' | 3 | 1029664 | 0 | b't\xdb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 1179076 | 0 | b't\x90\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 1218026 | 0 | b't\xf0\xe9' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' | 64 | 1320 | 0 | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' | ||
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | 64 | 898 | 0 | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2347 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 5204 | 0 | b'Identifier' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'82fa480335ce42c0aa3758cb0efe66be' | 32 | 390 | 0 | b'82fa480335ce42c0aa3758cb0efe66be' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1219 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2846 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 3253 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 253 | 0 | b'identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 18542 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc5\xe9' | 3 | 40995 | 0 | b't\xc5\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 579 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 620 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 649 | 0 | b'identifier' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 68439 | 0 | b't4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 88147 | 0 | b't)\xe9' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 2646 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| anti_sandboxing | vmdetect | $vmware24 | False | nex () | b'vmware' | 6 | 1890 | 0 | b'vmware' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $dev3 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| anti_sandboxing | VMWare_Detection | $vmware24 | False | () | b'vmware' | 6 | 1784 | 0 | b'vmware' | ||
| anti_sandboxing | vmdetect | $vmware24 | False | nex () | b'vmware' | 6 | 1784 | 0 | b'vmware' |
FILE assets/
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 7267 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa8\xe9' | 3 | 20394 | 0 | b't\xa8\xe9' |
FILE assets/swag.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspack_10567 | $a0 | False | PEiD () | b'u\x00\xe9' | 3 | 519959 | 0 | b'u\x00\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 107085 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x14\xe9' | 3 | 182813 | 0 | b't\x14\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xab\xe9' | 3 | 192276 | 0 | b't\xab\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xda\xe9' | 3 | 427904 | 0 | b't\xda\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tP\xe9' | 3 | 448518 | 0 | b'tP\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0b\xe9' | 3 | 609295 | 0 | b't\x0b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 639051 | 0 | b't\xca\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 648543 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 783070 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x92\xe9' | 3 | 826390 | 0 | b't\x92\xe9' |
FILE docs/callbacks.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 760 | 0 | b'identifier' |
FILE docs/sql/feature-importance.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 8024 | 0 | b'identifier' |
FILE docs/package-lock.json
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 299067 | 0 | b'vBox' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2483 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2595 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2625 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3156 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 19669 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95052 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95276 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95383 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 95416 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 128534 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 135789 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 161802 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 164815 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 175598 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 176990 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 179955 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 185313 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204011 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204123 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 204161 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275824 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275913 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 275928 | 0 | b'identifier' |
FILE docs/use-cases/data_enrichment/hugging-face-examples.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00020051795581821352' | 20 | 25906 | 0 | b'00020051795581821352' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00004535282641882077' | 20 | 30846 | 0 | b'00004535282641882077' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00000261212517216336' | 20 | 40534 | 0 | b'00000261212517216336' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00022261829872149974' | 20 | 42103 | 0 | b'00022261829872149974' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00001537964453746099' | 20 | 52376 | 0 | b'00001537964453746099' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00003155150625389069' | 20 | 52578 | 0 | b'00003155150625389069' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00003863943129545078' | 20 | 53346 | 0 | b'00003863943129545078' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00002220332135038916' | 20 | 53435 | 0 | b'00002220332135038916' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00003454017496551387' | 20 | 54027 | 0 | b'00003454017496551387' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00000970239307207521' | 20 | 54683 | 0 | b'00000970239307207521' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00001882187461887952' | 20 | 54839 | 0 | b'00001882187461887952' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00001339179198112106' | 20 | 55221 | 0 | b'00001339179198112106' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'00004790363891515881' | 20 | 55289 | 0 | b'00004790363891515881' |
FILE docs/use-cases/ai_workflow_automation/twilio-chatbot.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 3967 | 0 | b'identifier' |
FILE docs/assets/TWbot - hero Snoopstein.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1e\xe9' | 3 | 9602 | 0 | b't\x1e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbe\xe9' | 3 | 24727 | 0 | b't\xbe\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 132787 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaa\xe9' | 3 | 207647 | 0 | b't\xaa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 253445 | 0 | b't}\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tG\xe9' | 3 | 386699 | 0 | b'tG\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfd\xe9' | 3 | 496631 | 0 | b't\xfd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 581329 | 0 | b't\xf0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 625304 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1e\xe9' | 3 | 665360 | 0 | b't\x1e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tu\xe9' | 3 | 668154 | 0 | b'tu\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tb\xe9' | 3 | 714159 | 0 | b'tb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 889363 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 914551 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tk\xe9' | 3 | 923777 | 0 | b'tk\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0f\xe9' | 3 | 1022474 | 0 | b't\x0f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\r\xe9' | 3 | 1044417 | 0 | b't\r\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 1061743 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 1075994 | 0 | b'tq\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xce\xe9' | 3 | 1153681 | 0 | b't\xce\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe4\xe9' | 3 | 1251101 | 0 | b't\xe4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 1285369 | 0 | b'tm\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 1346129 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x13\xe9' | 3 | 1409118 | 0 | b't\x13\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 1475720 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xec\xe9' | 3 | 1584824 | 0 | b't\xec\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 1652057 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd1\xe9' | 3 | 1691443 | 0 | b't\xd1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 1718053 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd2\xe9' | 3 | 1808318 | 0 | b't\xd2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 1822565 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 2021979 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x07\xe9' | 3 | 2027965 | 0 | b't\x07\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x96\xe9' | 3 | 2124542 | 0 | b't\x96\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 2135086 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't;\xe9' | 3 | 2187674 | 0 | b't;\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x02\xe9' | 3 | 2200992 | 0 | b't\x02\xe9' |
FILE docs/assets/twilio-chatbot-diagram.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 35979 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 53459 | 0 | b'tq\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 95402 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf4\xe9' | 3 | 208803 | 0 | b't\xf4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 219628 | 0 | b't\xff\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 244104 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 372573 | 0 | b't\xf0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't_\xe9' | 3 | 393253 | 0 | b't_\xe9' |
FILE docs/assets/connect_mongo_compass_3.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa4\xe9' | 3 | 19619 | 0 | b't\xa4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaf\xe9' | 3 | 27179 | 0 | b't\xaf\xe9' |
FILE docs/assets/TWbot-response5.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x01\xe9' | 3 | 23437 | 0 | b't\x01\xe9' |
FILE docs/assets/cloud-login.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 4350 | 0 | b'tw\xe9' |
FILE docs/assets/TWbot-response2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | masm32_tasm32 | $a0 | False | PEiD () | b'j\xe9\xe8\x98\xe5\x9b\x8e\xa3' | 8 | 170683 | 0 | b'j\xe9\xe8\x98\xe5\x9b\x8e\xa3' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 138528 | 0 | b't}\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 307526 | 0 | b't\x1d\xe9' |
FILE docs/assets/twilio-text-model-response.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc9\xe9' | 3 | 3379 | 0 | b't\xc9\xe9' |
FILE docs/assets/dbeaver-preview-data.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcc\xe9' | 3 | 18876 | 0 | b't\xcc\xe9' |
FILE docs/assets/integration-image.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x03\xe9' | 3 | 23570 | 0 | b't\x03\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't=\xe9' | 3 | 35294 | 0 | b't=\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 112768 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'te\xe9' | 3 | 226170 | 0 | b'te\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xed\xe9' | 3 | 265158 | 0 | b't\xed\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tg\xe9' | 3 | 316959 | 0 | b'tg\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 360814 | 0 | b't\xd3\xe9' |
FILE docs/assets/SLBot-response3.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaa\xe9' | 3 | 136775 | 0 | b't\xaa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tt\xe9' | 3 | 178789 | 0 | b'tt\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 193137 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 193641 | 0 | b'tq\xe9' |
FILE docs/assets/SLBot-response2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b"t'\xe9" | 3 | 20192 | 0 | b"t'\xe9" | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 23321 | 0 | b't\x08\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 40163 | 0 | b'tV\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't|\xe9' | 3 | 49294 | 0 | b't|\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 54615 | 0 | b't\xf0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tl\xe9' | 3 | 71920 | 0 | b'tl\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tI\xe9' | 3 | 124552 | 0 | b'tI\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 196580 | 0 | b't\xca\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdd\xe9' | 3 | 210228 | 0 | b't\xdd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 213622 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 263430 | 0 | b't\xf0\xe9' |
FILE docs/assets/lightwood.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 8032 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 52487 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 54647 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 78535 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 80734 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x12\xe9' | 3 | 105668 | 0 | b't\x12\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb9\xe9' | 3 | 109185 | 0 | b't\xb9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 111871 | 0 | b't\xfb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8e\xe9' | 3 | 139603 | 0 | b't\x8e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 149409 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 149519 | 0 | b't\n\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x07\xe9' | 3 | 170090 | 0 | b't\x07\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tr\xe9' | 3 | 170662 | 0 | b'tr\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 176657 | 0 | b't\xea\xe9' |
FILE docs/assets/cloud/gui_query.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb9\xe9' | 3 | 95346 | 0 | b't\xb9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b"t'\xe9" | 3 | 112058 | 0 | b"t'\xe9" |
FILE docs/assets/cloud/plan_table.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 11690 | 0 | b'tx\xe9' |
FILE docs/assets/cloud/import_file.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't8\xe9' | 3 | 7061 | 0 | b't8\xe9' |
FILE docs/assets/cloud/import_file_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 10510 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 23940 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 59018 | 0 | b't\xe9\xe9' |
FILE docs/assets/SLBot-response4.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 118385 | 0 | b'tm\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 137795 | 0 | b't:\xe9' |
FILE docs/assets/predictors/train-timeseries.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tr\xe9' | 3 | 59408 | 0 | b'tr\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfc\xe9' | 3 | 131620 | 0 | b't\xfc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd1\xe9' | 3 | 178069 | 0 | b't\xd1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfc\xe9' | 3 | 364556 | 0 | b't\xfc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 447360 | 0 | b'tv\xe9' |
FILE docs/assets/predictors/postgresql-status.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd5\xe9' | 3 | 203370 | 0 | b't\xd5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 252858 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 254495 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't*\xe9' | 3 | 311779 | 0 | b't*\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tM\xe9' | 3 | 337692 | 0 | b'tM\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x12\xe9' | 3 | 343860 | 0 | b't\x12\xe9' |
FILE docs/assets/predictors/mysql-query.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 25313 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't<\xe9' | 3 | 198050 | 0 | b't<\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 205887 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x83\xe9' | 3 | 253966 | 0 | b't\x83\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 302088 | 0 | b't\xc2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tb\xe9' | 3 | 351441 | 0 | b'tb\xe9' |
FILE docs/assets/predictors/mysql-status.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1b\xe9' | 3 | 202330 | 0 | b't\x1b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't8\xe9' | 3 | 218927 | 0 | b't8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xda\xe9' | 3 | 262013 | 0 | b't\xda\xe9' |
FILE docs/assets/predictors/postgresql-insert.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf4\xe9' | 3 | 12570 | 0 | b't\xf4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 164571 | 0 | b't}\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb2\xe9' | 3 | 222182 | 0 | b't\xb2\xe9' |
FILE docs/assets/predictors/clickhouse-query.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 28231 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 31533 | 0 | b'tm\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 330605 | 0 | b't\x08\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb7\xe9' | 3 | 371635 | 0 | b't\xb7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tK\xe9' | 3 | 559755 | 0 | b'tK\xe9' |
FILE docs/assets/predictors/mariadb-insert.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdf\xe9' | 3 | 109185 | 0 | b't\xdf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 268175 | 0 | b't\x98\xe9' |
FILE docs/assets/predictors/mariadb-status.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1e\xe9' | 3 | 5809 | 0 | b't\x1e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't<\xe9' | 3 | 60932 | 0 | b't<\xe9' |
FILE docs/assets/predictors/train-advanced.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x04\xe9' | 3 | 237547 | 0 | b't\x04\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb8\xe9' | 3 | 329262 | 0 | b't\xb8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 351836 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 436148 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 451380 | 0 | b't\xea\xe9' |
FILE docs/assets/predictors/mssql-status.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspr12 | $a0 | False | PEiD () | b'h\x01\xad\xf7$\xc3' | 6 | 356475 | 0 | b'h\x01\xad\xf7$\xc3' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa9\xe9' | 3 | 111291 | 0 | b't\xa9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 149306 | 0 | b't\x08\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf8\xe9' | 3 | 223339 | 0 | b't\xf8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 313986 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x83\xe9' | 3 | 363881 | 0 | b't\x83\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1b\xe9' | 3 | 386420 | 0 | b't\x1b\xe9' |
FILE docs/assets/predictors/mongo/mongo-insert.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc7\xe9' | 3 | 150504 | 0 | b't\xc7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tP\xe9' | 3 | 163704 | 0 | b'tP\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfc\xe9' | 3 | 203491 | 0 | b't\xfc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 244690 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x85\xe9' | 3 | 401343 | 0 | b't\x85\xe9' |
FILE docs/assets/predictors/clickhouse-insert.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcf\xe9' | 3 | 68994 | 0 | b't\xcf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb2\xe9' | 3 | 135237 | 0 | b't\xb2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa9\xe9' | 3 | 274947 | 0 | b't\xa9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 469364 | 0 | b't\x98\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 485046 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 501110 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 552695 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 580886 | 0 | b't\x08\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 690861 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 746959 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 749529 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\r\xe9' | 3 | 799735 | 0 | b't\r\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't@\xe9' | 3 | 857474 | 0 | b't@\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't0\xe9' | 3 | 929714 | 0 | b't0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 956590 | 0 | b't\xe9\xe9' |
FILE docs/assets/mdb_image.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 194615 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tb\xe9' | 3 | 205805 | 0 | b'tb\xe9' |
FILE docs/assets/connect_tableau_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't&\xe9' | 3 | 10818 | 0 | b't&\xe9' |
FILE docs/assets/pythonsdk_install_output.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc5\xe9' | 3 | 17095 | 0 | b't\xc5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x18\xe9' | 3 | 32477 | 0 | b't\x18\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe4\xe9' | 3 | 38757 | 0 | b't\xe4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb6\xe9' | 3 | 60267 | 0 | b't\xb6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 62128 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 72589 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x94\xe9' | 3 | 98047 | 0 | b't\x94\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe2\xe9' | 3 | 172321 | 0 | b't\xe2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'td\xe9' | 3 | 235923 | 0 | b'td\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 237321 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe3\xe9' | 3 | 287774 | 0 | b't\xe3\xe9' |
FILE docs/assets/dbeaver-home-rentals-prediction-results.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ta\xe9' | 3 | 65042 | 0 | b'ta\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 68849 | 0 | b't\xc2\xe9' |
FILE docs/assets/install-dependencies-gui-x.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tj\xe9' | 3 | 4797 | 0 | b'tj\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x19\xe9' | 3 | 16958 | 0 | b't\x19\xe9' |
FILE docs/assets/byom_empty_form.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xba\xe9' | 3 | 9626 | 0 | b't\xba\xe9' |
FILE docs/assets/sql/select_bulk.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 34489 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb8\xe9' | 3 | 36405 | 0 | b't\xb8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 98314 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 98622 | 0 | b't]\xe9' |
FILE docs/assets/sql/select.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'th\xe9' | 3 | 48574 | 0 | b'th\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tI\xe9' | 3 | 73400 | 0 | b'tI\xe9' |
FILE docs/assets/sql/data-insights-1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc5\xe9' | 3 | 35200 | 0 | b't\xc5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tI\xe9' | 3 | 77201 | 0 | b'tI\xe9' |
FILE docs/assets/sql/dbeaver_5.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0c\xe9' | 3 | 11181 | 0 | b't\x0c\xe9' |
FILE docs/assets/sql/data-insights-2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1c\xe9' | 3 | 20530 | 0 | b't\x1c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 61533 | 0 | b't\xff\xe9' |
FILE docs/assets/sql/income_vs_debt_unknown_value.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8d\xe9' | 3 | 896 | 0 | b't\x8d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tW\xe9' | 3 | 942 | 0 | b'tW\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tD\xe9' | 3 | 2950 | 0 | b'tD\xe9' |
FILE docs/assets/sql/mysql-client.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 152785 | 0 | b'tq\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'te\xe9' | 3 | 153186 | 0 | b'te\xe9' |
FILE docs/assets/sql/grafana_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd8\xe9' | 3 | 56055 | 0 | b't\xd8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tj\xe9' | 3 | 58045 | 0 | b'tj\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't`\xe9' | 3 | 68123 | 0 | b't`\xe9' |
FILE docs/assets/sql/dbeaver_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tY\xe9' | 3 | 55842 | 0 | b'tY\xe9' |
FILE docs/assets/sql/grafana_4.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc6\xe9' | 3 | 2269 | 0 | b't\xc6\xe9' |
FILE docs/assets/sql/income_vs_debt_prediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x94\xe9' | 3 | 3889 | 0 | b't\x94\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tl\xe9' | 3 | 9956 | 0 | b'tl\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 13009 | 0 | b't\x98\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 34349 | 0 | b't\xd3\xe9' |
FILE docs/assets/sql/datasource.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | watcom_c | $a0 | False | PEiD () | b'\xe9\xd4X\x85Uw\xe7vwWA' | 11 | 765287 | 0 | b'\xe9\xd4X\x85Uw\xe7vwWA' | ||
| Old_Internal_PEiD | masm32_tasm32 | $a0 | False | PEiD () | b'j\xcb\xe8\x02\x0e0\n\xa3' | 8 | 994849 | 0 | b'j\xcb\xe8\x02\x0e0\n\xa3' | ||
| Old_Internal_PEiD | aspr11_brs | $a0 | False | PEiD () | b'`\xe9\xe8\x05' | 4 | 160216 | 0 | b'`\xe9\xe8\x05' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x19\xe9' | 3 | 86934 | 0 | b't\x19\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 206825 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tF\xe9' | 3 | 236161 | 0 | b'tF\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 247645 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x99\xe9' | 3 | 252797 | 0 | b't\x99\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xef\xe9' | 3 | 255467 | 0 | b't\xef\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 309111 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 418104 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x03\xe9' | 3 | 461490 | 0 | b't\x03\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd8\xe9' | 3 | 582641 | 0 | b't\xd8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 650471 | 0 | b't%\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 712337 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tW\xe9' | 3 | 739673 | 0 | b'tW\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 859897 | 0 | b't\xe0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 925571 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8b\xe9' | 3 | 943149 | 0 | b't\x8b\xe9' |
FILE docs/assets/sql/use.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 17268 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 28925 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x19\xe9' | 3 | 30776 | 0 | b't\x19\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 64527 | 0 | b'tV\xe9' |
FILE docs/assets/sql/dbeaver8.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 14694 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 16388 | 0 | b't\x90\xe9' |
FILE docs/assets/sql/select_hra.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't_\xe9' | 3 | 21250 | 0 | b't_\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'te\xe9' | 3 | 52427 | 0 | b'te\xe9' |
FILE docs/assets/sql/connectcloud.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 63663 | 0 | b't\xca\xe9' |
FILE docs/assets/sql/machine_learning_lifecycle.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 3841 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 25167 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't0\xe9' | 3 | 29783 | 0 | b't0\xe9' |
FILE docs/assets/sql/dbeaver_3.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tX\xe9' | 3 | 4963 | 0 | b'tX\xe9' |
FILE docs/assets/sql/grafana_1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x11\xe9' | 3 | 12307 | 0 | b't\x11\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb9\xe9' | 3 | 26383 | 0 | b't\xb9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 72954 | 0 | b't\xff\xe9' |
FILE docs/assets/sql/tutorials/selecti.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa3\xe9' | 3 | 118718 | 0 | b't\xa3\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/21-graph.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0f\xe9' | 3 | 30307 | 0 | b't\x0f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0f\xe9' | 3 | 39328 | 0 | b't\x0f\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/22-graph.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 1334 | 0 | b'tS\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 74696 | 0 | b't}\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/12-show_dtabases.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x83\xe9' | 3 | 15067 | 0 | b't\x83\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/23-graph.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't3\xe9' | 3 | 59417 | 0 | b't3\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/13-info_schema.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't^\xe9' | 3 | 3374 | 0 | b't^\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe1\xe9' | 3 | 22168 | 0 | b't\xe1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd2\xe9' | 3 | 27630 | 0 | b't\xd2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't<\xe9' | 3 | 57448 | 0 | b't<\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/9-connect_to_MindsDB.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf8\xe9' | 3 | 7585 | 0 | b't\xf8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa5\xe9' | 3 | 33324 | 0 | b't\xa5\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/2-ML_workflow.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x82\xe9' | 3 | 28144 | 0 | b't\x82\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/17-stops_by_route_Superset.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8e\xe9' | 3 | 59677 | 0 | b't\x8e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdf\xe9' | 3 | 117494 | 0 | b't\xdf\xe9' |
FILE docs/assets/sql/tutorials/snowflake-superset/24-MindsDB_ML-Workflow.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xed\xe9' | 3 | 18784 | 0 | b't\xed\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 54611 | 0 | b't\n\xe9' |
FILE docs/assets/sql/tutorials/select.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 154278 | 0 | b't\xfb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe7\xe9' | 3 | 156038 | 0 | b't\xe7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdb\xe9' | 3 | 175906 | 0 | b't\xdb\xe9' |
FILE docs/assets/sql/tutorials/bodyfat/create.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 14982 | 0 | b't\xd3\xe9' |
FILE docs/assets/sql/tutorials/bodyfat/connect-database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't@\xe9' | 3 | 22856 | 0 | b't@\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't@\xe9' | 3 | 31643 | 0 | b't@\xe9' |
FILE docs/assets/sql/tutorials/bodyfat/database-connected.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbf\xe9' | 3 | 18073 | 0 | b't\xbf\xe9' |
FILE docs/assets/sql/tutorials/bodyfat/status.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tk\xe9' | 3 | 19927 | 0 | b'tk\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcc\xe9' | 3 | 25060 | 0 | b't\xcc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 43584 | 0 | b't\xc2\xe9' |
FILE docs/assets/sql/tutorials/bodyfat/upload_file.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xba\xe9' | 3 | 27499 | 0 | b't\xba\xe9' |
FILE docs/assets/sql/tutorials/connect.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 57855 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tz\xe9' | 3 | 133420 | 0 | b'tz\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xab\xe9' | 3 | 160067 | 0 | b't\xab\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 416074 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't^\xe9' | 3 | 469148 | 0 | b't^\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 478925 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tr\xe9' | 3 | 482253 | 0 | b'tr\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/join_query.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | masm32_tasm32 | $a0 | False | PEiD () | b'jt\xe8\x88R\xc5\xc5\xa3' | 8 | 139269 | 0 | b'jt\xe8\x88R\xc5\xc5\xa3' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 112186 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf7\xe9' | 3 | 115341 | 0 | b't\xf7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xac\xe9' | 3 | 237527 | 0 | b't\xac\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 391513 | 0 | b't4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfd\xe9' | 3 | 412876 | 0 | b't\xfd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tH\xe9' | 3 | 436192 | 0 | b'tH\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 543535 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 554775 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't;\xe9' | 3 | 678636 | 0 | b't;\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tK\xe9' | 3 | 691948 | 0 | b'tK\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 778219 | 0 | b't%\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd2\xe9' | 3 | 835321 | 0 | b't\xd2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 863705 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xab\xe9' | 3 | 1036780 | 0 | b't\xab\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe5\xe9' | 3 | 1108384 | 0 | b't\xe5\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/create_predictor.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1b\xe9' | 3 | 15318 | 0 | b't\x1b\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/dbintegration.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspack_10567 | $a0 | False | PEiD () | b'u\x00\xe9' | 3 | 36330 | 0 | b'u\x00\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/select_prediction_query.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa2\xe9' | 3 | 23288 | 0 | b't\xa2\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/predictor_status.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 23599 | 0 | b't\xf2\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/dataselection.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 869 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 33123 | 0 | b'tq\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/create.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'te\xe9' | 3 | 5319 | 0 | b'te\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 29634 | 0 | b't+\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/connect_mysql_client.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't=\xe9' | 3 | 17991 | 0 | b't=\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 39221 | 0 | b'tp\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 62169 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tT\xe9' | 3 | 73861 | 0 | b'tT\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 75520 | 0 | b'ti\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/3rdprediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcf\xe9' | 3 | 65343 | 0 | b't\xcf\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/2ndprediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf1\xe9' | 3 | 59476 | 0 | b't\xf1\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/selectpredictor.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xad\xe9' | 3 | 11946 | 0 | b't\xad\xe9' |
FILE docs/assets/sql/tutorials/heart-disease/1prediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xad\xe9' | 3 | 20003 | 0 | b't\xad\xe9' |
FILE docs/assets/sql/tutorials/generating_images_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'd5c9b04771c0469ff491955adcaeec7a' | 32 | 87 | 0 | b'd5c9b04771c0469ff491955adcaeec7a' |
FILE docs/assets/sql/tutorials/crop-prediction/database-integration-mariadb.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 5622 | 0 | b't4\xe9' |
FILE docs/assets/sql/tutorials/insurance-cost-prediction/show-bitcoin-table.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xda\xe9' | 3 | 33945 | 0 | b't\xda\xe9' |
FILE docs/assets/sql/tutorials/insurance-cost-prediction/show-insurance-table.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x84\xe9' | 3 | 49705 | 0 | b't\x84\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 60712 | 0 | b't\x9f\xe9' |
FILE docs/assets/sql/tutorials/generating_images_1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'1f01c4cf670f6b15903856d7ea125974' | 32 | 87 | 0 | b'1f01c4cf670f6b15903856d7ea125974' |
FILE docs/assets/sql/tutorials/use.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 158783 | 0 | b't\xfa\xe9' |
FILE docs/assets/sql/tutorials/create_ds.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa7\xe9' | 3 | 4477 | 0 | b't\xa7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd1\xe9' | 3 | 274235 | 0 | b't\xd1\xe9' |
FILE docs/assets/sql/tutorials/insert.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 15688 | 0 | b't\xfa\xe9' |
FILE docs/assets/sql/tutorials/status.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xda\xe9' | 3 | 14851 | 0 | b't\xda\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 81020 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tP\xe9' | 3 | 107446 | 0 | b'tP\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x04\xe9' | 3 | 130422 | 0 | b't\x04\xe9' |
FILE docs/assets/sql/tutorials/insurance-cost/show-insurance-table.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x84\xe9' | 3 | 49705 | 0 | b't\x84\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 60712 | 0 | b't\x9f\xe9' |
FILE docs/assets/sql/tutorials/process-quality/dbintegration.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspack_10567 | $a0 | False | PEiD () | b'u\x00\xe9' | 3 | 36330 | 0 | b'u\x00\xe9' |
FILE docs/assets/sql/tutorials/process-quality/database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 39221 | 0 | b'tp\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 62169 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tT\xe9' | 3 | 73861 | 0 | b'tT\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 75520 | 0 | b'ti\xe9' |
FILE docs/assets/sql/tutorials/customer_churn/select.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x99\xe9' | 3 | 4984 | 0 | b't\x99\xe9' |
FILE docs/assets/sql/tutorials/customer_churn/customer_churn.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tz\xe9' | 3 | 16016 | 0 | b'tz\xe9' |
FILE docs/assets/sql/tutorials/customer_churn/upload.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 776 | 0 | b't\xfa\xe9' |
FILE docs/assets/sql/tutorials/connect.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tM\xe9' | 3 | 140828 | 0 | b'tM\xe9' |
FILE docs/assets/sql/tutorials/Mushrooms/dbintegration.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspack_10567 | $a0 | False | PEiD () | b'u\x00\xe9' | 3 | 36330 | 0 | b'u\x00\xe9' |
FILE docs/assets/sql/tutorials/Mushrooms/statuscheck.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x99\xe9' | 3 | 2892 | 0 | b't\x99\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xce\xe9' | 3 | 36955 | 0 | b't\xce\xe9' |
FILE docs/assets/sql/tutorials/Mushrooms/Selection_004.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 10102 | 0 | b't)\xe9' |
FILE docs/assets/sql/tutorials/Mushrooms/database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't|\xe9' | 3 | 76931 | 0 | b't|\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe3\xe9' | 3 | 83362 | 0 | b't\xe3\xe9' |
FILE docs/assets/sql/tutorials/Mushrooms/prediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 50345 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 57966 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 63506 | 0 | b't\xcd\xe9' |
FILE docs/assets/sql/income_vs_debt_predictor.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfd\xe9' | 3 | 15394 | 0 | b't\xfd\xe9' |
FILE docs/assets/sql/grafana_5.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 98276 | 0 | b't\xf6\xe9' |
FILE docs/assets/sql/select_file.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8d\xe9' | 3 | 29284 | 0 | b't\x8d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 66301 | 0 | b'tv\xe9' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDF' | 20 | 52717 | 0 | b'DDDDDDDDDDDDDDDDDDDF' |
FILE docs/assets/model-management.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x03\xe9' | 3 | 7435 | 0 | b't\x03\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 12438 | 0 | b't\x90\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'th\xe9' | 3 | 28610 | 0 | b'th\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd6\xe9' | 3 | 91609 | 0 | b't\xd6\xe9' |
FILE docs/assets/connect_tableau.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 44446 | 0 | b't\x9f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tf\xe9' | 3 | 82354 | 0 | b'tf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcc\xe9' | 3 | 137220 | 0 | b't\xcc\xe9' |
FILE docs/assets/twilio-chatbot-response.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 16128 | 0 | b't\x90\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x85\xe9' | 3 | 17939 | 0 | b't\x85\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 22144 | 0 | b't\xff\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xee\xe9' | 3 | 142947 | 0 | b't\xee\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa0\xe9' | 3 | 210709 | 0 | b't\xa0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 261474 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 333454 | 0 | b't\xc2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 462892 | 0 | b't\xeb\xe9' |
FILE docs/assets/connect_mongo_compass_1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 5391 | 0 | b't%\xe9' |
FILE docs/assets/dbeaver-create-connection.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xab\xe9' | 3 | 22133 | 0 | b't\xab\xe9' |
FILE docs/assets/databases/mongodb/mongo-mdb.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x96\xe9' | 3 | 56591 | 0 | b't\x96\xe9' |
FILE docs/assets/databases/mongodb/mongo-mdb-code.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa6\xe9' | 3 | 59346 | 0 | b't\xa6\xe9' |
FILE docs/assets/databases/mdb-postgres.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 26773 | 0 | b'ti\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe1\xe9' | 3 | 95128 | 0 | b't\xe1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 111332 | 0 | b't\n\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't*\xe9' | 3 | 113414 | 0 | b't*\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tC\xe9' | 3 | 154235 | 0 | b'tC\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 171374 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 252791 | 0 | b't\xc3\xe9' |
FILE docs/assets/databases/mdb-mysql.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't,\xe9' | 3 | 55777 | 0 | b't,\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 68559 | 0 | b't\xf0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8d\xe9' | 3 | 190178 | 0 | b't\x8d\xe9' |
FILE docs/assets/TWbot-response-image.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 35214 | 0 | b't\x98\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 58520 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't{\xe9' | 3 | 110886 | 0 | b't{\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't&\xe9' | 3 | 117053 | 0 | b't&\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb2\xe9' | 3 | 190601 | 0 | b't\xb2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcb\xe9' | 3 | 223761 | 0 | b't\xcb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x86\xe9' | 3 | 267482 | 0 | b't\x86\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't2\xe9' | 3 | 315305 | 0 | b't2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbf\xe9' | 3 | 320047 | 0 | b't\xbf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tD\xe9' | 3 | 381840 | 0 | b'tD\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 410265 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdb\xe9' | 3 | 432798 | 0 | b't\xdb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0b\xe9' | 3 | 554403 | 0 | b't\x0b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb7\xe9' | 3 | 579096 | 0 | b't\xb7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x93\xe9' | 3 | 581829 | 0 | b't\x93\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xef\xe9' | 3 | 635178 | 0 | b't\xef\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't{\xe9' | 3 | 644850 | 0 | b't{\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa6\xe9' | 3 | 695638 | 0 | b't\xa6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't,\xe9' | 3 | 726280 | 0 | b't,\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xba\xe9' | 3 | 739851 | 0 | b't\xba\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't9\xe9' | 3 | 798868 | 0 | b't9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9d\xe9' | 3 | 813872 | 0 | b't\x9d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't#\xe9' | 3 | 815213 | 0 | b't#\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcf\xe9' | 3 | 837509 | 0 | b't\xcf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9d\xe9' | 3 | 1060435 | 0 | b't\x9d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 1101272 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 1122194 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 1157580 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaf\xe9' | 3 | 1264115 | 0 | b't\xaf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x13\xe9' | 3 | 1440260 | 0 | b't\x13\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf7\xe9' | 3 | 1444534 | 0 | b't\xf7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xef\xe9' | 3 | 1552256 | 0 | b't\xef\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 1563702 | 0 | b't4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'to\xe9' | 3 | 1601602 | 0 | b'to\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1f\xe9' | 3 | 1603038 | 0 | b't\x1f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 1668090 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf1\xe9' | 3 | 1681495 | 0 | b't\xf1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd2\xe9' | 3 | 1682262 | 0 | b't\xd2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe7\xe9' | 3 | 1751738 | 0 | b't\xe7\xe9' |
FILE docs/assets/install-dependencies-gui.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 15773 | 0 | b't\xfb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1f\xe9' | 3 | 19137 | 0 | b't\x1f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'th\xe9' | 3 | 126930 | 0 | b'th\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 141796 | 0 | b't}\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa7\xe9' | 3 | 150393 | 0 | b't\xa7\xe9' |
FILE docs/assets/ai_system_deployment.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x87\xe9' | 3 | 33602 | 0 | b't\x87\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x89\xe9' | 3 | 41087 | 0 | b't\x89\xe9' |
FILE docs/assets/
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 78037 | 0 | b't\xcd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 170936 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tz\xe9' | 3 | 179758 | 0 | b'tz\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 197873 | 0 | b't\x1d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf3\xe9' | 3 | 245669 | 0 | b't\xf3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 8040 | 0 | b't\xca\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'td\xe9' | 3 | 2778 | 0 | b'td\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't;\xe9' | 3 | 6162 | 0 | b't;\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa5\xe9' | 3 | 104723 | 0 | b't\xa5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbf\xe9' | 3 | 106027 | 0 | b't\xbf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa9\xe9' | 3 | 32145 | 0 | b't\xa9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd7\xe9' | 3 | 40684 | 0 | b't\xd7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 89752 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc8\xe9' | 3 | 75534 | 0 | b't\xc8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaf\xe9' | 3 | 80703 | 0 | b't\xaf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 60860 | 0 | b't\xfb\xe9' |
FILE docs/assets/dbeaver-configure-docker-connection.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xba\xe9' | 3 | 60807 | 0 | b't\xba\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x80\xe9' | 3 | 150733 | 0 | b't\x80\xe9' |
FILE docs/assets/connect_tableau_3.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe4\xe9' | 3 | 69362 | 0 | b't\xe4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 91045 | 0 | b't\x1d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 110840 | 0 | b'tN\xe9' |
FILE docs/assets/use_cases/ai_workflow_automation.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 129833 | 0 | b't\xd3\xe9' |
FILE docs/assets/use_cases/indatabase_ml.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 43457 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe7\xe9' | 3 | 68699 | 0 | b't\xe7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 186499 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 189650 | 0 | b't\xf6\xe9' |
FILE docs/assets/use_cases/aipowered_data_retrieval.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 8532 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xac\xe9' | 3 | 66470 | 0 | b't\xac\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xef\xe9' | 3 | 99330 | 0 | b't\xef\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 118182 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa6\xe9' | 3 | 138327 | 0 | b't\xa6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't5\xe9' | 3 | 154864 | 0 | b't5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 242334 | 0 | b't\xeb\xe9' |
FILE docs/assets/use_cases/automated_finetuning.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 67442 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9c\xe9' | 3 | 103421 | 0 | b't\x9c\xe9' |
FILE docs/assets/use_cases/ai_agents.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 8532 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9b\xe9' | 3 | 114977 | 0 | b't\x9b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcf\xe9' | 3 | 151442 | 0 | b't\xcf\xe9' |
FILE docs/assets/use_cases/predictive_analytics.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 43457 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe7\xe9' | 3 | 68699 | 0 | b't\xe7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 183036 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 186241 | 0 | b't\xf6\xe9' |
FILE docs/assets/use_cases/data_enrichment.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 43457 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe7\xe9' | 3 | 68699 | 0 | b't\xe7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 169464 | 0 | b't\xeb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't]\xe9' | 3 | 183396 | 0 | b't]\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't5\xe9' | 3 | 196845 | 0 | b't5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't9\xe9' | 3 | 239083 | 0 | b't9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't9\xe9' | 3 | 239722 | 0 | b't9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't9\xe9' | 3 | 240361 | 0 | b't9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't9\xe9' | 3 | 241000 | 0 | b't9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't9\xe9' | 3 | 241639 | 0 | b't9\xe9' |
FILE docs/assets/supported_integrations.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 11765 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa9\xe9' | 3 | 77319 | 0 | b't\xa9\xe9' |
FILE docs/assets/connect_compassm.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 4365 | 0 | b'tm\xe9' |
FILE docs/assets/metabase_run_query_home_rentals.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tW\xe9' | 3 | 114593 | 0 | b'tW\xe9' |
FILE docs/assets/what_is_
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 36211 | 0 | b't\x1d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 39754 | 0 | b't\xc2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 41894 | 0 | b't\xc2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1a\xe9' | 3 | 65412 | 0 | b't\x1a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 119926 | 0 | b't\xc2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 190390 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't5\xe9' | 3 | 244198 | 0 | b't5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 248872 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b"t'\xe9" | 3 | 79212 | 0 | b"t'\xe9" | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 86678 | 0 | b't}\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbf\xe9' | 3 | 101348 | 0 | b't\xbf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 125989 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xee\xe9' | 3 | 126299 | 0 | b't\xee\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd6\xe9' | 3 | 139993 | 0 | b't\xd6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 199980 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xec\xe9' | 3 | 266918 | 0 | b't\xec\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tc\xe9' | 3 | 278441 | 0 | b'tc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tr\xe9' | 3 | 518065 | 0 | b'tr\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 520087 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfe\xe9' | 3 | 549606 | 0 | b't\xfe\xe9' |
FILE docs/assets/metabase_run_query_show_tables.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 22983 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ts\xe9' | 3 | 41293 | 0 | b'ts\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tW\xe9' | 3 | 64096 | 0 | b'tW\xe9' |
FILE docs/assets/dbeaver-empty-script.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b"t'\xe9" | 3 | 3609 | 0 | b"t'\xe9" | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc6\xe9' | 3 | 30176 | 0 | b't\xc6\xe9' |
FILE docs/assets/getting-started.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 11838 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 13041 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 28636 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 48496 | 0 | b't\x98\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9d\xe9' | 3 | 84956 | 0 | b't\x9d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdd\xe9' | 3 | 596156 | 0 | b't\xdd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 712926 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tB\xe9' | 3 | 717455 | 0 | b'tB\xe9' |
FILE docs/assets/TWbot-response1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 36086 | 0 | b't\x9f\xe9' |
FILE docs/assets/dbeaver-home-rentals-prediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'td\xe9' | 3 | 60638 | 0 | b'td\xe9' |
FILE docs/assets/data/mssql-select.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspr12 | $a0 | False | PEiD () | b'h\x01\xf00\xa9\xc3' | 6 | 130329 | 0 | b'h\x01\xf00\xa9\xc3' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 68830 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe7\xe9' | 3 | 127226 | 0 | b't\xe7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8c\xe9' | 3 | 137498 | 0 | b't\x8c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 310477 | 0 | b't\xff\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 380776 | 0 | b't\x90\xe9' |
FILE docs/assets/ai-integrations.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 54548 | 0 | b't\xf0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd6\xe9' | 3 | 84766 | 0 | b't\xd6\xe9' |
FILE docs/assets/report-issue.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | watcom_c | $a0 | False | PEiD () | b'\xe9\x80\xaf6K\xb0\x94\x13\xceWA' | 11 | 365650 | 0 | b'\xe9\x80\xaf6K\xb0\x94\x13\xceWA' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 183347 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 189527 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 194488 | 0 | b'tS\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 195670 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe4\xe9' | 3 | 272895 | 0 | b't\xe4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 292722 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x84\xe9' | 3 | 383732 | 0 | b't\x84\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdd\xe9' | 3 | 387244 | 0 | b't\xdd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x84\xe9' | 3 | 398042 | 0 | b't\x84\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 533470 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf4\xe9' | 3 | 739763 | 0 | b't\xf4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 945813 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'td\xe9' | 3 | 949111 | 0 | b'td\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 1024789 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tk\xe9' | 3 | 1156989 | 0 | b'tk\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbc\xe9' | 3 | 1219447 | 0 | b't\xbc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9e\xe9' | 3 | 1307724 | 0 | b't\x9e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't`\xe9' | 3 | 1561278 | 0 | b't`\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf3\xe9' | 3 | 1565322 | 0 | b't\xf3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 1688367 | 0 | b'tx\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 1692789 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd7\xe9' | 3 | 1769473 | 0 | b't\xd7\xe9' |
FILE docs/assets/connect_tableau_6.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 18619 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x84\xe9' | 3 | 37143 | 0 | b't\x84\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe1\xe9' | 3 | 126085 | 0 | b't\xe1\xe9' |
FILE docs/assets/report_issues/6_security_vulnerability_form_4.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tE\xe9' | 3 | 25420 | 0 | b'tE\xe9' |
FILE docs/assets/report_issues/5_new_integration_form_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't*\xe9' | 3 | 8827 | 0 | b't*\xe9' |
FILE docs/assets/report_issues/4_improve_docs_form_1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 10151 | 0 | b'tS\xe9' |
FILE docs/assets/report_issues/2_bug_report_form_3.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't0\xe9' | 3 | 6283 | 0 | b't0\xe9' |
FILE docs/assets/report_issues/6_security_vulnerability_form_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xac\xe9' | 3 | 14337 | 0 | b't\xac\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8d\xe9' | 3 | 25121 | 0 | b't\x8d\xe9' |
FILE docs/assets/connect_tableau_7.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe2\xe9' | 3 | 3975 | 0 | b't\xe2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 40451 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 138492 | 0 | b't\xe0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tt\xe9' | 3 | 182905 | 0 | b'tt\xe9' |
FILE docs/assets/connect_tableau_4.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcb\xe9' | 3 | 30473 | 0 | b't\xcb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 75052 | 0 | b't\xc3\xe9' |
FILE docs/assets/dbeaver-configure-cloud-connection.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tB\xe9' | 3 | 133164 | 0 | b'tB\xe9' |
FILE docs/assets/BearHeroImageMindsDB.jpeg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xef\xe9' | 3 | 12414 | 0 | b't\xef\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x16\xe9' | 3 | 18191 | 0 | b't\x16\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8c\xe9' | 3 | 42935 | 0 | b't\x8c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 53874 | 0 | b'ti\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 111131 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tu\xe9' | 3 | 116524 | 0 | b'tu\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x83\xe9' | 3 | 261777 | 0 | b't\x83\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 324066 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tb\xe9' | 3 | 326316 | 0 | b'tb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xab\xe9' | 3 | 357236 | 0 | b't\xab\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdb\xe9' | 3 | 374809 | 0 | b't\xdb\xe9' |
FILE docs/assets/tutorials/aitables-mariadb/mdb-maria.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 51683 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd1\xe9' | 3 | 53124 | 0 | b't\xd1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 138509 | 0 | b't\x0e\xe9' |
FILE docs/assets/tutorials/aitables-mariadb/database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 3791 | 0 | b't4\xe9' |
FILE docs/assets/tutorials/aitables-mariadb/training.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 15684 | 0 | b'tx\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 96187 | 0 | b't\x7f\xe9' |
FILE docs/assets/tutorials/aitables-mariadb/predicted-info.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 15269 | 0 | b'tp\xe9' |
FILE docs/assets/tutorials/aitables-postgresql/select_model.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 8504 | 0 | b'tp\xe9' |
FILE docs/assets/tutorials/crops/statuscheck.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb6\xe9' | 3 | 45914 | 0 | b't\xb6\xe9' |
FILE docs/assets/tutorials/crops/selectfromfiles.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdf\xe9' | 3 | 24994 | 0 | b't\xdf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 59733 | 0 | b'ti\xe9' |
FILE docs/assets/tutorials/crops/database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 39221 | 0 | b'tp\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 62169 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tT\xe9' | 3 | 73861 | 0 | b'tT\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 75520 | 0 | b'ti\xe9' |
FILE docs/assets/tutorials/crops/2ndprediction.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8c\xe9' | 3 | 37633 | 0 | b't\x8c\xe9' |
FILE docs/assets/tutorials/crops/createcropspredictor.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 9991 | 0 | b't\x0e\xe9' |
FILE docs/assets/tutorials/llamaindex/3.describe.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 6625 | 0 | b'tN\xe9' |
FILE docs/assets/tutorials/llamaindex/1.ml_engine.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 31912 | 0 | b't\xe0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 32090 | 0 | b't\xe0\xe9' |
FILE docs/assets/tutorials/llamaindex/2.create_model.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | watcom_c | $a0 | False | PEiD () | b'\xe9\xa7\x9f\xdc\x12\xbf\xe1C\x01WA' | 11 | 8302 | 0 | b'\xe9\xa7\x9f\xdc\x12\xbf\xe1C\x01WA' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tX\xe9' | 3 | 56714 | 0 | b'tX\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa2\xe9' | 3 | 80769 | 0 | b't\xa2\xe9' |
FILE docs/assets/tutorials/llamaindex/5.batch.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 11882 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x94\xe9' | 3 | 20352 | 0 | b't\x94\xe9' |
FILE docs/assets/tutorials/llamaindex/4.select_model.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x92\xe9' | 3 | 88192 | 0 | b't\x92\xe9' |
FILE docs/assets/tutorials/twitter_chatbot/Twitter-chatbot-
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc9\xe9' | 3 | 42941 | 0 | b't\xc9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tl\xe9' | 3 | 650 | 0 | b'tl\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 33550 | 0 | b't\x9f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 110249 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tf\xe9' | 3 | 185967 | 0 | b'tf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc9\xe9' | 3 | 550634 | 0 | b't\xc9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 625850 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc2\xe9' | 3 | 21891 | 0 | b't\xc2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 24357 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0b\xe9' | 3 | 62217 | 0 | b't\x0b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 111279 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 233355 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't.\xe9' | 3 | 277114 | 0 | b't.\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tP\xe9' | 3 | 282523 | 0 | b'tP\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 334311 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tH\xe9' | 3 | 368314 | 0 | b'tH\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 97158 | 0 | b'tV\xe9' |
FILE docs/assets/tutorials/twitter_chatbot/animated-gif-skysql-service-create.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspr11b | $a0 | False | PEiD () | b'`\xe9?\x04' | 4 | 1459562 | 0 | b'`\xe9?\x04' | ||
| Old_Internal_PEiD | aspr11_brs | $a0 | False | PEiD () | b'`\xe9\xe0\x05' | 4 | 1656923 | 0 | b'`\xe9\xe0\x05' | ||
| Old_Internal_PEiD | aspr11_brs | $a0 | False | PEiD () | b'`\xe9\xba\x05' | 4 | 2753040 | 0 | b'`\xe9\xba\x05' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa6\xe9' | 3 | 8766 | 0 | b't\xa6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 66648 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 186184 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't^\xe9' | 3 | 249616 | 0 | b't^\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 277324 | 0 | b'tV\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tH\xe9' | 3 | 326442 | 0 | b'tH\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9a\xe9' | 3 | 484396 | 0 | b't\x9a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 779902 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 868710 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 875790 | 0 | b't\x1d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tl\xe9' | 3 | 897721 | 0 | b'tl\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 937430 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tD\xe9' | 3 | 1019427 | 0 | b'tD\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe3\xe9' | 3 | 1027376 | 0 | b't\xe3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't#\xe9' | 3 | 1317582 | 0 | b't#\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 1487404 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 1510375 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't^\xe9' | 3 | 1665168 | 0 | b't^\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x86\xe9' | 3 | 1700841 | 0 | b't\x86\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tB\xe9' | 3 | 1754005 | 0 | b'tB\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x91\xe9' | 3 | 1768085 | 0 | b't\x91\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x04\xe9' | 3 | 1954837 | 0 | b't\x04\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x11\xe9' | 3 | 1977981 | 0 | b't\x11\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 2092506 | 0 | b'tV\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't^\xe9' | 3 | 2100904 | 0 | b't^\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 2116101 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tz\xe9' | 3 | 2128924 | 0 | b'tz\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfe\xe9' | 3 | 2142568 | 0 | b't\xfe\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 2810131 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1d\xe9' | 3 | 2812361 | 0 | b't\x1d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 2816679 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't,\xe9' | 3 | 2851644 | 0 | b't,\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tI\xe9' | 3 | 2855320 | 0 | b'tI\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tY\xe9' | 3 | 2943142 | 0 | b'tY\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 2971101 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe3\xe9' | 3 | 3041775 | 0 | b't\xe3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't/\xe9' | 3 | 3083846 | 0 | b't/\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x16\xe9' | 3 | 3113143 | 0 | b't\x16\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 3189673 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 3204451 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 3380079 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 3418738 | 0 | b't\x08\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 3519657 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tO\xe9' | 3 | 3529383 | 0 | b'tO\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x02\xe9' | 3 | 3691227 | 0 | b't\x02\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb9\xe9' | 3 | 3721136 | 0 | b't\xb9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't8\xe9' | 3 | 3763797 | 0 | b't8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 3768048 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 3932859 | 0 | b't\xfb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x92\xe9' | 3 | 3935213 | 0 | b't\x92\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 3990160 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1b\xe9' | 3 | 4017346 | 0 | b't\x1b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 4059144 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 4180993 | 0 | b't\xca\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't/\xe9' | 3 | 4208378 | 0 | b't/\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaf\xe9' | 3 | 4283508 | 0 | b't\xaf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 4296956 | 0 | b't%\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf7\xe9' | 3 | 4339973 | 0 | b't\xf7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 4389521 | 0 | b't\xcd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb1\xe9' | 3 | 4445156 | 0 | b't\xb1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 4568049 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x85\xe9' | 3 | 4753192 | 0 | b't\x85\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tf\xe9' | 3 | 4787944 | 0 | b'tf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tc\xe9' | 3 | 4983080 | 0 | b'tc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 5018613 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 5047609 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 5102958 | 0 | b'ti\xe9' |
FILE docs/assets/tutorials/twitter_chatbot/Twitter-chatbot-snoopstien.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 47698 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 91661 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tC\xe9' | 3 | 141968 | 0 | b'tC\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 155716 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb5\xe9' | 3 | 263352 | 0 | b't\xb5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't{\xe9' | 3 | 292766 | 0 | b't{\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd7\xe9' | 3 | 327325 | 0 | b't\xd7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcf\xe9' | 3 | 400529 | 0 | b't\xcf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa4\xe9' | 3 | 405278 | 0 | b't\xa4\xe9' |
FILE docs/assets/tutorials/twitter_chatbot/mariadb-sky-connect.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | masm32_tasm32 | $a0 | False | PEiD () | b'j\x8e\xe8\xb2\x1a\xebS\xa3' | 8 | 16123504 | 0 | b'j\x8e\xe8\xb2\x1a\xebS\xa3' | ||
| Old_Internal_PEiD | aspr11b | $a0 | False | PEiD () | b'`\xe9\x13\x04' | 4 | 5077406 | 0 | b'`\xe9\x13\x04' | ||
| Old_Internal_PEiD | aspr11b | $a0 | False | PEiD () | b'`\xe9\xa5\x04' | 4 | 8615834 | 0 | b'`\xe9\xa5\x04' | ||
| Old_Internal_PEiD | aspr12 | $a0 | False | PEiD () | b'h\x019\xf5\x1a\xc3' | 6 | 238788 | 0 | b'h\x019\xf5\x1a\xc3' | ||
| Old_Internal_PEiD | aspr12 | $a0 | False | PEiD () | b'h\x01\x9f\xfd\xdd\xc3' | 6 | 11804515 | 0 | b'h\x01\x9f\xfd\xdd\xc3' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa7\xe9' | 3 | 27528 | 0 | b't\xa7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 44430 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't>\xe9' | 3 | 243340 | 0 | b't>\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 259794 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 292929 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 354373 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa1\xe9' | 3 | 396628 | 0 | b't\xa1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 563573 | 0 | b'tS\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdb\xe9' | 3 | 787819 | 0 | b't\xdb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't=\xe9' | 3 | 869516 | 0 | b't=\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tA\xe9' | 3 | 948781 | 0 | b'tA\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 991359 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tc\xe9' | 3 | 994311 | 0 | b'tc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't2\xe9' | 3 | 1058097 | 0 | b't2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb2\xe9' | 3 | 1068935 | 0 | b't\xb2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x82\xe9' | 3 | 1199041 | 0 | b't\x82\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 1222308 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 1407791 | 0 | b't\xcd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfc\xe9' | 3 | 1411866 | 0 | b't\xfc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x03\xe9' | 3 | 1566684 | 0 | b't\x03\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 1759666 | 0 | b't\x9f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tE\xe9' | 3 | 1773383 | 0 | b'tE\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8d\xe9' | 3 | 1797182 | 0 | b't\x8d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1a\xe9' | 3 | 1799455 | 0 | b't\x1a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb3\xe9' | 3 | 1815535 | 0 | b't\xb3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xec\xe9' | 3 | 1958206 | 0 | b't\xec\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\t\xe9' | 3 | 2120878 | 0 | b't\t\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 2305502 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf5\xe9' | 3 | 2601503 | 0 | b't\xf5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xba\xe9' | 3 | 2612901 | 0 | b't\xba\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 2631646 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 2652180 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcc\xe9' | 3 | 2740030 | 0 | b't\xcc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf8\xe9' | 3 | 2813962 | 0 | b't\xf8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 2862208 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 2918358 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 3009550 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc8\xe9' | 3 | 3030600 | 0 | b't\xc8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 3064894 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tF\xe9' | 3 | 3117581 | 0 | b'tF\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tj\xe9' | 3 | 3133077 | 0 | b'tj\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x02\xe9' | 3 | 3287924 | 0 | b't\x02\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\\\xe9' | 3 | 3339788 | 0 | b't\\\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfc\xe9' | 3 | 3350404 | 0 | b't\xfc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xda\xe9' | 3 | 4039925 | 0 | b't\xda\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x16\xe9' | 3 | 4064236 | 0 | b't\x16\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 4078985 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9c\xe9' | 3 | 4085647 | 0 | b't\x9c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8a\xe9' | 3 | 4104734 | 0 | b't\x8a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x17\xe9' | 3 | 4128745 | 0 | b't\x17\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tF\xe9' | 3 | 4289085 | 0 | b'tF\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't,\xe9' | 3 | 4331024 | 0 | b't,\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 4350996 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 4380087 | 0 | b'ti\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tH\xe9' | 3 | 4418110 | 0 | b'tH\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 4448024 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc6\xe9' | 3 | 4514394 | 0 | b't\xc6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't*\xe9' | 3 | 4560013 | 0 | b't*\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 4590880 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xce\xe9' | 3 | 4660728 | 0 | b't\xce\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 4682140 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa1\xe9' | 3 | 4685786 | 0 | b't\xa1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc9\xe9' | 3 | 4749502 | 0 | b't\xc9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 4823562 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd6\xe9' | 3 | 4845993 | 0 | b't\xd6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't=\xe9' | 3 | 4854788 | 0 | b't=\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 4895072 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tM\xe9' | 3 | 4914044 | 0 | b'tM\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 5196263 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9c\xe9' | 3 | 5226908 | 0 | b't\x9c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa2\xe9' | 3 | 5510952 | 0 | b't\xa2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 5789350 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x97\xe9' | 3 | 5816038 | 0 | b't\x97\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tl\xe9' | 3 | 5878738 | 0 | b'tl\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 6028996 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xac\xe9' | 3 | 6047074 | 0 | b't\xac\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf7\xe9' | 3 | 6126983 | 0 | b't\xf7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't/\xe9' | 3 | 6138540 | 0 | b't/\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9d\xe9' | 3 | 6185742 | 0 | b't\x9d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 6270845 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xce\xe9' | 3 | 6302254 | 0 | b't\xce\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 6372456 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x06\xe9' | 3 | 6392349 | 0 | b't\x06\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 6440408 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tO\xe9' | 3 | 6451679 | 0 | b'tO\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 6483555 | 0 | b't\x9f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 6502043 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't/\xe9' | 3 | 6606615 | 0 | b't/\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x94\xe9' | 3 | 6712475 | 0 | b't\x94\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x14\xe9' | 3 | 6847209 | 0 | b't\x14\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc7\xe9' | 3 | 6874187 | 0 | b't\xc7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd8\xe9' | 3 | 6904493 | 0 | b't\xd8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x95\xe9' | 3 | 6923241 | 0 | b't\x95\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 6923834 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1c\xe9' | 3 | 6926845 | 0 | b't\x1c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xec\xe9' | 3 | 6931987 | 0 | b't\xec\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tB\xe9' | 3 | 6954746 | 0 | b'tB\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 6956807 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 7113904 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaf\xe9' | 3 | 7340843 | 0 | b't\xaf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tV\xe9' | 3 | 7405050 | 0 | b'tV\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa0\xe9' | 3 | 7522231 | 0 | b't\xa0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't&\xe9' | 3 | 7532199 | 0 | b't&\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 7674652 | 0 | b'tS\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc4\xe9' | 3 | 7725171 | 0 | b't\xc4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 7740248 | 0 | b't\xeb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tQ\xe9' | 3 | 7749730 | 0 | b'tQ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd7\xe9' | 3 | 7763559 | 0 | b't\xd7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd4\xe9' | 3 | 7863066 | 0 | b't\xd4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa0\xe9' | 3 | 7911512 | 0 | b't\xa0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't5\xe9' | 3 | 8501020 | 0 | b't5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 8531465 | 0 | b't4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't,\xe9' | 3 | 8617499 | 0 | b't,\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 8794814 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xff\xe9' | 3 | 9108678 | 0 | b't\xff\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tl\xe9' | 3 | 9213952 | 0 | b'tl\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa8\xe9' | 3 | 9255725 | 0 | b't\xa8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x14\xe9' | 3 | 9342704 | 0 | b't\x14\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x82\xe9' | 3 | 9364896 | 0 | b't\x82\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tC\xe9' | 3 | 9666474 | 0 | b'tC\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't>\xe9' | 3 | 9741875 | 0 | b't>\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tc\xe9' | 3 | 9749783 | 0 | b'tc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc8\xe9' | 3 | 9791256 | 0 | b't\xc8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 9972396 | 0 | b't\xeb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9e\xe9' | 3 | 10056824 | 0 | b't\x9e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x99\xe9' | 3 | 10159534 | 0 | b't\x99\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x07\xe9' | 3 | 10309926 | 0 | b't\x07\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd3\xe9' | 3 | 10342023 | 0 | b't\xd3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 10498320 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x18\xe9' | 3 | 10505544 | 0 | b't\x18\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd2\xe9' | 3 | 10762845 | 0 | b't\xd2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 11022090 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 11152935 | 0 | b't\x90\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't8\xe9' | 3 | 11201611 | 0 | b't8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\\\xe9' | 3 | 11231640 | 0 | b't\\\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 11231963 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd4\xe9' | 3 | 11323607 | 0 | b't\xd4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 11334394 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa4\xe9' | 3 | 11448816 | 0 | b't\xa4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tG\xe9' | 3 | 11511535 | 0 | b'tG\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa5\xe9' | 3 | 11538069 | 0 | b't\xa5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tq\xe9' | 3 | 11691242 | 0 | b'tq\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x01\xe9' | 3 | 11699667 | 0 | b't\x01\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tB\xe9' | 3 | 11717551 | 0 | b'tB\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x89\xe9' | 3 | 11820906 | 0 | b't\x89\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 11841364 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't=\xe9' | 3 | 12134483 | 0 | b't=\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb5\xe9' | 3 | 12368985 | 0 | b't\xb5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 12467965 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 12659830 | 0 | b'tm\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 12691362 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 12709099 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\r\xe9' | 3 | 12719079 | 0 | b't\r\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbe\xe9' | 3 | 12725277 | 0 | b't\xbe\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 12762844 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0f\xe9' | 3 | 12886875 | 0 | b't\x0f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 12889516 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 12893117 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't_\xe9' | 3 | 13220920 | 0 | b't_\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't}\xe9' | 3 | 13449735 | 0 | b't}\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't4\xe9' | 3 | 13529501 | 0 | b't4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 13571145 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x96\xe9' | 3 | 13757046 | 0 | b't\x96\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdd\xe9' | 3 | 13763655 | 0 | b't\xdd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't-\xe9' | 3 | 13862979 | 0 | b't-\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdd\xe9' | 3 | 13886692 | 0 | b't\xdd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xca\xe9' | 3 | 13951714 | 0 | b't\xca\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa1\xe9' | 3 | 13951823 | 0 | b't\xa1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xce\xe9' | 3 | 14060882 | 0 | b't\xce\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x90\xe9' | 3 | 14384757 | 0 | b't\x90\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tf\xe9' | 3 | 14438947 | 0 | b'tf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't0\xe9' | 3 | 14646729 | 0 | b't0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa1\xe9' | 3 | 14746868 | 0 | b't\xa1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa8\xe9' | 3 | 14826260 | 0 | b't\xa8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 14876026 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 14882561 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 14958035 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tT\xe9' | 3 | 14997541 | 0 | b'tT\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x17\xe9' | 3 | 15020618 | 0 | b't\x17\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 15022911 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb8\xe9' | 3 | 15064385 | 0 | b't\xb8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't>\xe9' | 3 | 15107801 | 0 | b't>\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't.\xe9' | 3 | 15211507 | 0 | b't.\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1e\xe9' | 3 | 15260308 | 0 | b't\x1e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 15293887 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x84\xe9' | 3 | 15300446 | 0 | b't\x84\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 15318860 | 0 | b't%\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 15439037 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 15516600 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb7\xe9' | 3 | 15556731 | 0 | b't\xb7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbc\xe9' | 3 | 15754794 | 0 | b't\xbc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x95\xe9' | 3 | 15799416 | 0 | b't\x95\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tY\xe9' | 3 | 15865843 | 0 | b'tY\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbe\xe9' | 3 | 15889468 | 0 | b't\xbe\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb0\xe9' | 3 | 15893454 | 0 | b't\xb0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tD\xe9' | 3 | 16018350 | 0 | b'tD\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 16286320 | 0 | b'tm\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcc\xe9' | 3 | 16345379 | 0 | b't\xcc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x99\xe9' | 3 | 16387537 | 0 | b't\x99\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaa\xe9' | 3 | 16402509 | 0 | b't\xaa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 16425411 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 16657361 | 0 | b'tS\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 16703612 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 16703776 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcb\xe9' | 3 | 16767655 | 0 | b't\xcb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x02\xe9' | 3 | 16768851 | 0 | b't\x02\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 16835209 | 0 | b'tx\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tU\xe9' | 3 | 16965926 | 0 | b'tU\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't5\xe9' | 3 | 16990632 | 0 | b't5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8c\xe9' | 3 | 16990842 | 0 | b't\x8c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tO\xe9' | 3 | 17075819 | 0 | b'tO\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't!\xe9' | 3 | 17149117 | 0 | b't!\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe2\xe9' | 3 | 17324855 | 0 | b't\xe2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tm\xe9' | 3 | 17414682 | 0 | b'tm\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 17637124 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbd\xe9' | 3 | 17660185 | 0 | b't\xbd\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbf\xe9' | 3 | 17681545 | 0 | b't\xbf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 17731895 | 0 | b't\x9f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x89\xe9' | 3 | 17754114 | 0 | b't\x89\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe1\xe9' | 3 | 17950129 | 0 | b't\xe1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x17\xe9' | 3 | 18009098 | 0 | b't\x17\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tM\xe9' | 3 | 18019666 | 0 | b'tM\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbc\xe9' | 3 | 18249920 | 0 | b't\xbc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x89\xe9' | 3 | 18436604 | 0 | b't\x89\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 18444094 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't^\xe9' | 3 | 18524600 | 0 | b't^\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x82\xe9' | 3 | 18641382 | 0 | b't\x82\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't<\xe9' | 3 | 18642573 | 0 | b't<\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa4\xe9' | 3 | 18646469 | 0 | b't\xa4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 18733268 | 0 | b't\xae\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x15\xe9' | 3 | 18740230 | 0 | b't\x15\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tv\xe9' | 3 | 18753516 | 0 | b'tv\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x80\xe9' | 3 | 19064901 | 0 | b't\x80\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 19193443 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tN\xe9' | 3 | 19560444 | 0 | b'tN\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1a\xe9' | 3 | 19587605 | 0 | b't\x1a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 19625520 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tD\xe9' | 3 | 19638653 | 0 | b'tD\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't`\xe9' | 3 | 19659004 | 0 | b't`\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 19681020 | 0 | b't\xe0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 19764901 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0b\xe9' | 3 | 19801004 | 0 | b't\x0b\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xea\xe9' | 3 | 20011341 | 0 | b't\xea\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x98\xe9' | 3 | 20161914 | 0 | b't\x98\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa2\xe9' | 3 | 20380413 | 0 | b't\xa2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 20385057 | 0 | b'tL\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\r\xe9' | 3 | 20682976 | 0 | b't\r\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x93\xe9' | 3 | 20694869 | 0 | b't\x93\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't7\xe9' | 3 | 20698882 | 0 | b't7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 20789474 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x1f\xe9' | 3 | 20806858 | 0 | b't\x1f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 20839565 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa7\xe9' | 3 | 20841741 | 0 | b't\xa7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xee\xe9' | 3 | 21034995 | 0 | b't\xee\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't#\xe9' | 3 | 21096262 | 0 | b't#\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x14\xe9' | 3 | 21114718 | 0 | b't\x14\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe6\xe9' | 3 | 21120243 | 0 | b't\xe6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 21169134 | 0 | b't+\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xee\xe9' | 3 | 21210068 | 0 | b't\xee\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 21228521 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x11\xe9' | 3 | 21311696 | 0 | b't\x11\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbe\xe9' | 3 | 21342906 | 0 | b't\xbe\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't%\xe9' | 3 | 21431565 | 0 | b't%\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 21432513 | 0 | b'tx\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't7\xe9' | 3 | 21436607 | 0 | b't7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 21542348 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x07\xe9' | 3 | 21750114 | 0 | b't\x07\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 21778967 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc3\xe9' | 3 | 21798619 | 0 | b't\xc3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa5\xe9' | 3 | 21826033 | 0 | b't\xa5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 21917245 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd4\xe9' | 3 | 21952412 | 0 | b't\xd4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't-\xe9' | 3 | 22097708 | 0 | b't-\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd8\xe9' | 3 | 22225928 | 0 | b't\xd8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't,\xe9' | 3 | 22531804 | 0 | b't,\xe9' |
FILE docs/assets/tutorials/zero-shot-classification-postgresql.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tg\xe9' | 3 | 25754 | 0 | b'tg\xe9' |
FILE docs/assets/tutorials/llm-chatbot-ui/publish.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 3966 | 0 | b't\x05\xe9' |
FILE docs/assets/tutorials/llm-chatbot-ui/welcome.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 4224 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't:\xe9' | 3 | 4350 | 0 | b't:\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 4472 | 0 | b't\n\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9a\xe9' | 3 | 4630 | 0 | b't\x9a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 4777 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 4935 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb2\xe9' | 3 | 5089 | 0 | b't\xb2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 5247 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe2\xe9' | 3 | 5264 | 0 | b't\xe2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 5398 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 5532 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't"\xe9' | 3 | 5656 | 0 | b't"\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 5765 | 0 | b't\n\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 5853 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf7\xe9' | 3 | 45854 | 0 | b't\xf7\xe9' |
FILE docs/assets/tutorials/llm-chatbot-ui/settings.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 26018 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 26115 | 0 | b't\x0e\xe9' |
FILE docs/assets/tutorials/diabetes/select_predictor.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspr12 | $a0 | False | PEiD () | b'h\x01!D\x9e\xc3' | 6 | 46781 | 0 | b'h\x01!D\x9e\xc3' |
FILE docs/assets/tutorials/diabetes/pg4admin/index.jpeg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 4313 | 0 | b't\n\xe9' |
FILE docs/assets/tutorials/diabetes/DBdiabetes.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't$\xe9' | 3 | 40824 | 0 | b't$\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x08\xe9' | 3 | 49105 | 0 | b't\x08\xe9' |
FILE docs/assets/tutorials/diabetes/connecting_mysql_client.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x7f\xe9' | 3 | 6038 | 0 | b't\x7f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tO\xe9' | 3 | 172005 | 0 | b'tO\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tL\xe9' | 3 | 669247 | 0 | b'tL\xe9' |
FILE docs/assets/tutorials/diabetes/Connecting_database_to_MindsdbCloud.gif
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | aspr11b | $a0 | False | PEiD () | b'`\xe9l\x04' | 4 | 1218409 | 0 | b'`\xe9l\x04' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't<\xe9' | 3 | 188747 | 0 | b't<\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 275575 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't.\xe9' | 3 | 348652 | 0 | b't.\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tJ\xe9' | 3 | 441141 | 0 | b'tJ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\n\xe9' | 3 | 575907 | 0 | b't\n\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't*\xe9' | 3 | 856418 | 0 | b't*\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't6\xe9' | 3 | 858916 | 0 | b't6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd0\xe9' | 3 | 919199 | 0 | b't\xd0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 1049926 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't*\xe9' | 3 | 1066303 | 0 | b't*\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd6\xe9' | 3 | 1463997 | 0 | b't\xd6\xe9' |
FILE docs/assets/tutorials/diabetes/database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 39221 | 0 | b'tp\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xde\xe9' | 3 | 62169 | 0 | b't\xde\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tT\xe9' | 3 | 73861 | 0 | b'tT\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ti\xe9' | 3 | 75520 | 0 | b'ti\xe9' |
FILE docs/assets/tutorials/diabetes/predictor.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd4\xe9' | 3 | 22057 | 0 | b't\xd4\xe9' |
FILE docs/assets/tutorials/aitables-mysql/list_tables.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8e\xe9' | 3 | 18124 | 0 | b't\x8e\xe9' |
FILE docs/assets/tutorials/aitables-mssql/AI Tables.jpg
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd9\xe9' | 3 | 54184 | 0 | b't\xd9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 62859 | 0 | b't\xfb\xe9' |
FILE docs/assets/tutorials/aitables-mssql/train-model.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't-\xe9' | 3 | 4837 | 0 | b't-\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't3\xe9' | 3 | 55085 | 0 | b't3\xe9' |
FILE docs/assets/tutorials/aitables-clickhouse/select-info2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tu\xe9' | 3 | 20776 | 0 | b'tu\xe9' |
FILE docs/assets/tutorials/aitables-clickhouse/select-info.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 10473 | 0 | b'tR\xe9' |
FILE docs/assets/tutorials/monkeylearn/1.create_ml.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 28276 | 0 | b't\x9f\xe9' |
FILE docs/assets/twilio-image-model-image.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x19\xe9' | 3 | 10073 | 0 | b't\x19\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tY\xe9' | 3 | 87902 | 0 | b'tY\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 182542 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 300066 | 0 | b't\xf9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x86\xe9' | 3 | 307216 | 0 | b't\x86\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa2\xe9' | 3 | 350629 | 0 | b't\xa2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\t\xe9' | 3 | 461412 | 0 | b't\t\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tX\xe9' | 3 | 476958 | 0 | b'tX\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf6\xe9' | 3 | 652186 | 0 | b't\xf6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc0\xe9' | 3 | 818654 | 0 | b't\xc0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x88\xe9' | 3 | 849158 | 0 | b't\x88\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tc\xe9' | 3 | 863386 | 0 | b'tc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 903849 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x86\xe9' | 3 | 946682 | 0 | b't\x86\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 965161 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 1049422 | 0 | b't\xf0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xbf\xe9' | 3 | 1061396 | 0 | b't\xbf\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tA\xe9' | 3 | 1081703 | 0 | b'tA\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 1091340 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfb\xe9' | 3 | 1099163 | 0 | b't\xfb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdb\xe9' | 3 | 1103336 | 0 | b't\xdb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 1139268 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x0e\xe9' | 3 | 1169780 | 0 | b't\x0e\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x12\xe9' | 3 | 1174014 | 0 | b't\x12\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x13\xe9' | 3 | 1336316 | 0 | b't\x13\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ts\xe9' | 3 | 1408899 | 0 | b'ts\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x87\xe9' | 3 | 1463271 | 0 | b't\x87\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xeb\xe9' | 3 | 1624019 | 0 | b't\xeb\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't~\xe9' | 3 | 1635346 | 0 | b't~\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 1656879 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 1744759 | 0 | b'tw\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf7\xe9' | 3 | 1762607 | 0 | b't\xf7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc6\xe9' | 3 | 1811767 | 0 | b't\xc6\xe9' |
FILE docs/assets/docker/docker_desktop/
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | watcom_c | $a0 | False | PEiD () | b'\xe9\xa2\xd7\x17\xa2{\x8c\x82kWA' | 11 | 1035691 | 0 | b'\xe9\xa2\xd7\x17\xa2{\x8c\x82kWA' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb5\xe9' | 3 | 55852 | 0 | b't\xb5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x05\xe9' | 3 | 260707 | 0 | b't\x05\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe6\xe9' | 3 | 382038 | 0 | b't\xe6\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't)\xe9' | 3 | 495937 | 0 | b't)\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb9\xe9' | 3 | 498968 | 0 | b't\xb9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc9\xe9' | 3 | 528410 | 0 | b't\xc9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 678540 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x11\xe9' | 3 | 857722 | 0 | b't\x11\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x17\xe9' | 3 | 863311 | 0 | b't\x17\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ts\xe9' | 3 | 897363 | 0 | b'ts\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa9\xe9' | 3 | 1027582 | 0 | b't\xa9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x94\xe9' | 3 | 1123210 | 0 | b't\x94\xe9' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 98730 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 100518 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b"t'\xe9" | 3 | 239 | 0 | b"t'\xe9" | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't[\xe9' | 3 | 167929 | 0 | b't[\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdc\xe9' | 3 | 223428 | 0 | b't\xdc\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe9\xe9' | 3 | 272343 | 0 | b't\xe9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc9\xe9' | 3 | 310266 | 0 | b't\xc9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x87\xe9' | 3 | 482884 | 0 | b't\x87\xe9' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'BDDDDDDDDDDDDDDDDDDD' | 20 | 181870 | 0 | b'BDDDDDDDDDDDDDDDDDDD' |
FILE docs/assets/docker/docker_desktop/enable-extension-containers.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 6832 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tZ\xe9' | 3 | 24481 | 0 | b'tZ\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa7\xe9' | 3 | 53627 | 0 | b't\xa7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x04\xe9' | 3 | 126265 | 0 | b't\x04\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'th\xe9' | 3 | 147643 | 0 | b'th\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd4\xe9' | 3 | 152560 | 0 | b't\xd4\xe9' |
FILE docs/assets/docker/docker_desktop/enable-win-dev-mode.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tx\xe9' | 3 | 42558 | 0 | b'tx\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x07\xe9' | 3 | 53184 | 0 | b't\x07\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb3\xe9' | 3 | 78614 | 0 | b't\xb3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb0\xe9' | 3 | 80418 | 0 | b't\xb0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf4\xe9' | 3 | 80521 | 0 | b't\xf4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9a\xe9' | 3 | 87447 | 0 | b't\x9a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd6\xe9' | 3 | 203873 | 0 | b't\xd6\xe9' |
FILE docs/assets/docker/docker_desktop/containers-running-extension.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb5\xe9' | 3 | 55852 | 0 | b't\xb5\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9f\xe9' | 3 | 71263 | 0 | b't\x9f\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb4\xe9' | 3 | 242819 | 0 | b't\xb4\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\r\xe9' | 3 | 280439 | 0 | b't\r\xe9' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 110506 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 185805 | 0 | b'DDDDDDDDDDDDDDDDDDDD' | ||
| findcrypt | Big_Numbers0 | $c0 | False | _pusher_ () | b'DDDDDDDDDDDDDDDDDDDD' | 20 | 185912 | 0 | b'DDDDDDDDDDDDDDDDDDDD' |
FILE docs/assets/docker/docker_desktop/pull-latest-image.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xa8\xe9' | 3 | 63114 | 0 | b't\xa8\xe9' |
FILE docs/assets/TWbot-response4.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't0\xe9' | 3 | 5194 | 0 | b't0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb9\xe9' | 3 | 25966 | 0 | b't\xb9\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xd9\xe9' | 3 | 51063 | 0 | b't\xd9\xe9' |
FILE docs/assets/dbeaver-create-database.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xc1\xe9' | 3 | 53756 | 0 | b't\xc1\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x99\xe9' | 3 | 57321 | 0 | b't\x99\xe9' |
FILE docs/assets/faqs_download.csv.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf9\xe9' | 3 | 5125 | 0 | b't\xf9\xe9' |
FILE docs/assets/SLBot-Hero-Whizfizz.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tS\xe9' | 3 | 1406 | 0 | b'tS\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xdd\xe9' | 3 | 53299 | 0 | b't\xdd\xe9' |
FILE docs/assets/SLBot-response1.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'ty\xe9' | 3 | 7579 | 0 | b'ty\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't0\xe9' | 3 | 173237 | 0 | b't0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 217491 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf2\xe9' | 3 | 258935 | 0 | b't\xf2\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xef\xe9' | 3 | 266792 | 0 | b't\xef\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't#\xe9' | 3 | 311152 | 0 | b't#\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't5\xe9' | 3 | 316908 | 0 | b't5\xe9' |
FILE docs/assets/connect_mongo_compass_2.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x01\xe9' | 3 | 5351 | 0 | b't\x01\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x18\xe9' | 3 | 23945 | 0 | b't\x18\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tw\xe9' | 3 | 26206 | 0 | b'tw\xe9' |
FILE docs/assets/connect_tableau_5.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tp\xe9' | 3 | 92857 | 0 | b'tp\xe9' |
FILE docs/assets/byom_diagram.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x8a\xe9' | 3 | 34611 | 0 | b't\x8a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tR\xe9' | 3 | 89163 | 0 | b'tR\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9a\xe9' | 3 | 103924 | 0 | b't\x9a\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xb7\xe9' | 3 | 113961 | 0 | b't\xb7\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xf0\xe9' | 3 | 190496 | 0 | b't\xf0\xe9' |
FILE docs/assets/automation.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe3\xe9' | 3 | 34759 | 0 | b't\xe3\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x11\xe9' | 3 | 83479 | 0 | b't\x11\xe9' |
FILE docs/assets/dbeaver-create-script.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xfa\xe9' | 3 | 76387 | 0 | b't\xfa\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xae\xe9' | 3 | 78869 | 0 | b't\xae\xe9' |
FILE docs/assets/connect_compass_cloud.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b'tr\xe9' | 3 | 18003 | 0 | b'tr\xe9' |
FILE docs/
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'a8938acb6c6b47f98cb3225ede3d33b5' | 32 | 4104 | 0 | b'a8938acb6c6b47f98cb3225ede3d33b5' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 962 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 278 | 0 | b'Identifier' |
FILE docs/rest/models/describe-model.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 791 | 0 | b'identifier' |
FILE docs/integrations/ai-engines/replicate-text2video.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' | 64 | 1883 | 0 | b'e22e77495f2fb83c34d5fae2ad8ab63c0a87b6b573b6208e1535b23b89ea66d6' |
FILE docs/integrations/ai-engines/replicate-audio.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' | 64 | 1863 | 0 | b'e9658de4b325863c4fcdc12d94bb7c9b54cbfe351b7ca1b36860008172b91c71' |
FILE docs/integrations/ai-engines/replicate-text2img.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' | 64 | 1810 | 0 | b'2af375da21c5b824a84e1c459f45b69a117ec8649c2aa974112d7cf1840fc0ce' |
FILE docs/integrations/ai-engines/replicate-img2text.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' | 64 | 1854 | 0 | b'2e1dddc8621f72155f24cf2e0adbde548458d3cab9f00c0139eea840d0ac4746' |
FILE docs/integrations/ai-engines/replicate-llm.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers3 | $c0 | False | _pusher_ () | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' | 64 | 1917 | 0 | b'6282abe6a492de4145d7bb601023762212f9ddbbe78278bd6771c8b3b2f2a13b' |
FILE docs/integrations/ai-engines/anomaly.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'cf93972b116ca5268827d575f2cc226b' | 32 | 384 | 0 | b'cf93972b116ca5268827d575f2cc226b' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'0996e5faa3f7415bacd51a6e8e161d5e' | 32 | 6729 | 0 | b'0996e5faa3f7415bacd51a6e8e161d5e' | ||
| findcrypt | Big_Numbers1 | $c0 | False | _pusher_ () | b'c22335d83cb04ac281e2ef080792f2dd' | 32 | 6844 | 0 | b'c22335d83cb04ac281e2ef080792f2dd' |
FILE docs/integrations/data-integrations/all-data-integrations.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14829 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14908 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 14978 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 28068 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 46627 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/oracle.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1012 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/cloud-spanner.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1054 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1098 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1129 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/sap-hana.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1327 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/google-bigquery.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1172 | 0 | b'identifier' |
FILE docs/integrations/data-integrations/snowflake.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1120 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1200 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1244 | 0 | b'identifier' |
FILE docs/tutorials/images/sentiment-analysis-on-french-tweets/createmysqldb.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe0\xe9' | 3 | 14073 | 0 | b't\xe0\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't+\xe9' | 3 | 33477 | 0 | b't+\xe9' |
FILE docs/tutorials/images/sentiment-analysis-on-french-tweets/query.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9d\xe9' | 3 | 31784 | 0 | b't\x9d\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't<\xe9' | 3 | 33617 | 0 | b't<\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xaa\xe9' | 3 | 65820 | 0 | b't\xaa\xe9' |
FILE docs/tutorials/images/sentiment-analysis-on-french-tweets/railwaydetails.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x9c\xe9' | 3 | 40643 | 0 | b't\x9c\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xcd\xe9' | 3 | 51865 | 0 | b't\xcd\xe9' |
FILE docs/tutorials/images/sentiment-analysis-on-french-tweets/batch.png
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\xe8\xe9' | 3 | 115932 | 0 | b't\xe8\xe9' | ||
| Old_Internal_PEiD | pepack10 | $a0 | False | PEiD () | b't\x94\xe9' | 3 | 126026 | 0 | b't\x94\xe9' |
FILE docs/sdks/mongo/database.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1141 | 0 | b'Identifier' |
FILE docs/sdks/mongo/databases/insertOne.mdx
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1218 | 0 | b'Identifier' |
FILE docs/yarn.lock
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $data1 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' | ||
| anti_sandboxing | VBox_Detection | $dev3 | False | () | b'vBox' | 4 | 174341 | 0 | b'vBox' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1881 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 1984 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2014 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 2426 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 4531 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57710 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57778 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57874 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 57907 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 76494 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 81328 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 98849 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 100173 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 107513 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 109043 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 113114 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120817 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120918 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 120956 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 123474 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160260 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160337 | 0 | b'identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'identifier' | 10 | 160352 | 0 | b'identifier' |
FILE docker/db_images/postgres/certs/server.crt
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' |
FILE docker/db_images/postgres/certs/root.crt
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| Detect_Sandbox_Unprotect | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | Qemu_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VBox_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1771 | 0 | b'Identifier' | ||
| anti_sandboxing | VMWare_Detection | $dev2 | False | () | b'Identifier' | 10 | 1893 | 0 | b'Identifier' |
FILE docker/docker-compose-ci.yml
| Test Name | Test Description | Match Rule | Match String | Is XOR | Author | Test Creation Date | Matched data | Length | Offset | XOR key | Plaintext |
|---|